Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3d8f2691 by Moritz Muehlenhoff at 2018-05-17T16:39:03+02:00
lrzip, libgxps no-dsa
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1021,6 +1021,8 @@ CVE-2018-10768 (There is a NULL pointer dereference in
the AnnotPath::getCoordsL
NOTE: Fixed by:
https://cgit.freedesktop.org/poppler/poppler/commit/?id=942adfc25e7a00ac3cf032ced2d8949e99099f70
(poppler-0.37)
CVE-2018-10767 (There is a stack-based buffer over-read in calling GLib in the
function ...)
- libgxps <unfixed> (bug #898133)
+ [stretch] - libgxps <no-dsa> (Minor issue)
+ [jessie] - libgxps <no-dsa> (Minor issue)
[wheezy] - libgxps <ignored> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1575188
TODO: check (in particular if reported upstream)
@@ -1104,6 +1106,8 @@ CVE-2018-10734 (KONGTOP DVR devices A303, A403, D303,
D305, and D403 contain a .
NOT-FOR-US: KONGTOP DVR devices
CVE-2018-10733 (There is a heap-based buffer over-read in the function ...)
- libgxps <unfixed> (low; bug #897954)
+ [stretch] - libgxps <no-dsa> (Minor issue)
+ [jessie] - libgxps <no-dsa> (Minor issue)
[wheezy] - libgxps <ignored> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1574844
NOTE:
https://git.gnome.org/browse/libgxps/commit/?id=b458226e162fe1ffe7acb4230c114a52ada5131b
@@ -1208,7 +1212,9 @@ CVE-2018-10687
CVE-2018-10686 (An issue was discovered in Vesta Control Panel 0.9.8-20. There
is ...)
NOT-FOR-US: Vesta Control Panel
CVE-2018-10685 (In Long Range Zip (aka lrzip) 0.631, there is a use-after-free
in the ...)
- - lrzip <unfixed> (bug #897645)
+ - lrzip <unfixed> (low; bug #897645)
+ [stretch] - lrzip <no-dsa> (Minor issue)
+ [jessie] - lrzip <no-dsa> (Minor issue)
[wheezy] - lrzip <ignored> (Minor issue)
NOTE: https://github.com/ckolivas/lrzip/issues/95
CVE-2018-10684
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/3d8f269134f49ec2a1ee7e1b928f254947208a10
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/3d8f269134f49ec2a1ee7e1b928f254947208a10
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
