Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9446b19e by Salvatore Bonaccorso at 2019-05-16T20:25:59Z
Update information on CVE-2018-20821/libsass
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1550,7 +1550,10 @@ CVE-2018-20822 (LibSass 3.5.4 allows attackers to cause
a denial-of-service (unc
NOTE: https://github.com/sass/libsass/issues/2671
CVE-2018-20821 (The parsing component in LibSass through 3.5.5 allows
attackers to cau ...)
- libsass <unfixed>
+ [stretch] - libsass <not-affected> (Vulnerable code introduced later)
NOTE: https://github.com/sass/libsass/issues/2658
+ NOTE: Introduced by:
https://github.com/sass/libsass/commit/efd97dae376de50b3e6ed724337c4f274a21491d
(3.5.0)
+ NOTE: Fixed by:
https://github.com/sass/libsass/commit/f2db04883e5fff4e03777dcc1eb60d4373c45be1
CVE-2018-20820 (read_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows
attackers to c ...)
- lepton <unfixed> (bug #927925)
NOTE:
https://github.com/dropbox/lepton/commit/6a5ceefac1162783fffd9506a3de39c85c725761
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/9446b19eca250a2c44529475e7d3de7842469f79
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/9446b19eca250a2c44529475e7d3de7842469f79
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
