Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
57e7de5a by Salvatore Bonaccorso at 2018-12-28T08:58:37Z
Add CVE-2018-2054{1,2}/libxsmm

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -19,9 +19,16 @@ CVE-2018-20544 (There is floating point exception at 
caca/dither.c (function ...
 CVE-2018-20543 (There is an attempted excessive memory allocation at ...)
        TODO: check
 CVE-2018-20542 (There is a heap-based buffer-overflow at 
generator_spgemm_csc_reader.c ...)
-       TODO: check
+       - libxsmm <unfixed>
+       NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1652633
+       NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1652635
+       NOTE: 
https://github.com/hfp/libxsmm/commit/151481489192e6d1997f8bde52c5c425ea41741d
+       NOTE: https://github.com/hfp/libxsmm/issues/287
 CVE-2018-20541 (There is a heap-based buffer overflow in 
libxsmm_sparse_csc_reader at ...)
-       TODO: check
+       - libxsmm <unfixed>
+       NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1652632
+       NOTE: 
https://github.com/hfp/libxsmm/commit/151481489192e6d1997f8bde52c5c425ea41741d
+       NOTE: https://github.com/hfp/libxsmm/issues/287
 CVE-2018-20540 (There is memory leak at liblas::Open (liblas/liblas.hpp) in 
libLAS ...)
        TODO: check
 CVE-2018-20539 (There is a Segmentation fault triggered by illegal address 
access at ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/57e7de5ad4845d5fd23d402f7a1a6b7ff841b4a0

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/57e7de5ad4845d5fd23d402f7a1a6b7ff841b4a0
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to