Markus Koschany pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1e5696a8 by Markus Koschany at 2019-05-05T14:56:31Z
CVE-2018-19105,librecad: All Debian versions are vulnerable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -32133,8 +32133,11 @@ CVE-2018-19107 (In Exiv2 0.26,
Exiv2::IptcParser::decode in iptc.cpp (called fro
CVE-2018-19106 (Avi Vantage before 17.2.13 uses an invalid URL encoding during
a redir ...)
NOT-FOR-US: Avi Vantage
CVE-2018-19105 (LibreCAD 2.1.3 allows remote attackers to cause a denial of
service (0 ...)
- - librecad <undetermined>
+ - librecad <unfixed>
NOTE: https://code610.blogspot.com/2018/11/crashing-librecad-213.html
+ NOTE: https://github.com/LibreCAD/LibreCAD/issues/1038
+ NOTE: Fixed by
https://github.com/LibreCAD/LibreCAD/commit/6da7cc5f7f31afb008f03dbd11e07207ccd82085
+ NOTE: Regression fix
https://github.com/LibreCAD/LibreCAD/commit/8604f171ee380f294102da6154adf77ab754d403
CVE-2018-19104 (In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability
that can b ...)
NOT-FOR-US: BageCMS
CVE-2018-19103
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/1e5696a84c2fa4f5252ae6f5fc513426ee57aefc
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/1e5696a84c2fa4f5252ae6f5fc513426ee57aefc
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
