Roberto C. Sánchez pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e4465daa by Roberto C. Sánchez at 2018-10-10T05:51:59Z
LTS/exiv2 annotate CVE-2018-10780 as not affecting jessie
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -18685,7 +18685,9 @@ CVE-2018-10781
RESERVED
CVE-2018-10780 (Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a
heap-based ...)
- exiv2 <undetermined>
+ [jessie] - exiv2 <not-affected> (Vulnerable code not present; image
format not supported)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1575201
+ NOTE: Fixed by upstream commit
https://github.com/Exiv2/exiv2/commit/74cb5bab132ed76adf15df172c5e8b58cddaa96c
TODO: check, there is same function in byteSwap2 in earlier versions
than 0.26
CVE-2018-10779 (TIFFWriteScanline in tif_write.c in LibTIFF 3.8.2 has a
heap-based ...)
- tiff 4.0.6-3 (bug #898359)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/e4465daaf4ba06adaa35332758c68bf7c42bef01
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/e4465daaf4ba06adaa35332758c68bf7c42bef01
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
