Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3746afa5 by Salvatore Bonaccorso at 2018-06-06T21:38:40+02:00
Process two giflib issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -844,15 +844,15 @@ CVE-2018-11492
CVE-2018-11491
RESERVED
CVE-2018-11490 (The DGifDecompressLine function in dgif_lib.c in GIFLIB
(possibly ...)
- - giflib <undetermined>
+ - giflib <unfixed>
NOTE: https://github.com/pts/sam2p/issues/38
+ NOTE: https://sourceforge.net/p/giflib/bugs/113/
NOTE: Issue was reported against sam2p but issue is in dgif_lib.c from
giflib.
- TODO: check
CVE-2018-11489 (The DGifDecompressLine function in dgif_lib.c in GIFLIB
(possibly ...)
- - giflib <undetermined>
+ - giflib <unfixed>
NOTE: https://github.com/pts/sam2p/issues/37
+ NOTE: https://sourceforge.net/p/giflib/bugs/112/
NOTE: Issue was reported against sam2p but issue is in dgif_lib.c from
giflib.
- TODO: check
CVE-2018-11488 (A stack exhaustion vulnerability in the search function of
dtSearch ...)
NOT-FOR-US: dtSearch
CVE-2018-11487 (PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php,
or the ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/3746afa5870aba854f8fff5b9deb5186291f3389
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/3746afa5870aba854f8fff5b9deb5186291f3389
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
