Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3e486814 by Salvatore Bonaccorso at 2018-09-20T19:40:34Z
Add CVE-2018-1723{5,6}/mp4v2
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -15,9 +15,13 @@ CVE-2018-17237 (A SIGFPE signal is raised in the function
H5D__chunk_set_info_re
NOTE:
https://github.com/SegfaultMasters/covering360/blob/master/HDF5/README.md#divided-by-zero---h5d__chunk_set_info_real_div_by_zero
TODO: check
CVE-2018-17236 (The function MP4Free() in mp4property.cpp in libmp4v2 2.1.0
internally ...)
- TODO: check
+ - mp4v2 <unfixed>
+ [stretch] - mp4v2 <no-dsa> (Minor issue)
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1629453
CVE-2018-17235 (The function mp4v2::impl::MP4Track::FinishSdtp() in
mp4track.cpp in ...)
- TODO: check
+ - mp4v2 <unfixed>
+ [stretch] - mp4v2 <no-dsa> (Minor issue)
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1629451
CVE-2018-17234 (Memory leak in the H5O__chunk_deserialize() function in
H5Ocache.c in ...)
- hdf5 <undetermined>
NOTE:
https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln3#memory-leak---h5o__chunk_deserialize_memory_leak
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/3e486814bbe9cbb43094c77ccbb9c385364b918a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/3e486814bbe9cbb43094c77ccbb9c385364b918a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
