László Böszörményi pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
301423cf by Laszlo Boszormenyi (GCS) at 2019-06-10T21:07:02Z
Add CVE-2019-{5018,8457}/sqlite3 fixed version in unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -11613,7 +11613,7 @@ CVE-2019-8459
CVE-2019-8458
RESERVED
CVE-2019-8457 (SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to
heap out-o ...)
- - sqlite3 <unfixed> (bug #929775)
+ - sqlite3 3.27.2-3 (bug #929775)
NOTE: https://www.sqlite.org/src/info/90acdbfce9c08858
CVE-2019-8456 (Check Point IKEv2 IPsec VPN up to R80.30, in some less common
conditio ...)
NOT-FOR-US: Check Point
@@ -19974,7 +19974,7 @@ CVE-2019-5020
CVE-2019-5019 (A heap-based overflow vulnerability exists in the PowerPoint
document ...)
NOT-FOR-US: Rainbow PDF Office Server Document Converter
CVE-2019-5018 (An exploitable use after free vulnerability exists in the
window funct ...)
- - sqlite3 <unfixed> (bug #928770)
+ - sqlite3 3.27.2-3 (bug #928770)
[stretch] - sqlite3 <not-affected> (windowfuncs introduced in 3.25.0)
[jessie] - sqlite3 <not-affected> (windowfuncs introduced in 3.25.0)
NOTE:
https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0777
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/301423cff6448a279c73b45702d9732e6c713c80
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/301423cff6448a279c73b45702d9732e6c713c80
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits