[Secure-testing-team] Bug#847270: zlib: CVE-2016-9840 CVE-2016-9841: out-of-bounds pointer

[Salvatore Bonaccorso]

Source: zlib
Version: 1:1.2.8.dfsg-2
Severity: important
Tags: security upstream patch

Hi,

the following vulnerabilities were published for zlib.

CVE-2016-9840[0] and CVVE-2016-9841[1].

If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-9840
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9840
    https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0
[1] https://security-tracker.debian.org/tracker/CVE-2016-9841
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9841
    https://github.com/madler/zlib/commit/9aaec95e82117c1cb0f9624264c3618fc380cecb

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore