Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e1db095b by Salvatore Bonaccorso at 2018-04-29T10:21:10+02:00
Add two new libraw issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,9 +1,13 @@
CVE-2018-10530
RESERVED
CVE-2018-10529 (An issue was discovered in LibRaw 0.18.9. There is an
out-of-bounds ...)
- TODO: check
+ - libraw <unfixed>
+ NOTE:
https://github.com/LibRaw/LibRaw/commit/f0c505a3e5d47989a5f69be2d0d4f250af6b1a6c
+ NOTE: https://github.com/LibRaw/LibRaw/issues/144
CVE-2018-10528 (An issue was discovered in LibRaw 0.18.9. There is a
stack-based buffer ...)
- TODO: check
+ - libraw <unfixed>
+ NOTE:
https://github.com/LibRaw/LibRaw/commit/895529fc2f2eb8bc633edd6b04b5b237eb4db564
+ NOTE: https://github.com/LibRaw/LibRaw/issues/144
CVE-2018-10527 (EasyCMS 1.3 is prone to Stored XSS when posting an article;
four fields ...)
NOT-FOR-US: EasyCMS
CVE-2018-10526
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/e1db095b9362c93336deeaa54bfe8827c5fb4bce
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/e1db095b9362c93336deeaa54bfe8827c5fb4bce
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
