Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b395210e by Salvatore Bonaccorso at 2018-10-02T07:40:03Z
Update information for CVE-2018-17581/exiv2
Mark severity as low.
Add bug reference to #910060.
Mark as no-dsa for stretch.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -560,7 +560,8 @@ CVE-2018-17583
CVE-2018-17582 (tcpreplay v4.3.0 contains a heap-based buffer over-read. The
...)
TODO: check
CVE-2018-17581 (CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2
0.26 has ...)
- - exiv2 <unfixed>
+ - exiv2 <unfixed> (low; bug #910060)
+ [stretch] - exiv2 <no-dsa> (Minor issue)
NOTE: https://github.com/Exiv2/exiv2/issues/460
CVE-2018-17580 (A heap-based buffer over-read exists in the function
fast_edit_packet() ...)
TODO: check
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/b395210e6e860651630d0af47079b961ba7d3757
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/b395210e6e860651630d0af47079b961ba7d3757
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
