Hugo Lefeuvre pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e388cd94 by Hugo Lefeuvre at 2019-10-08T12:24:35Z
CVE-2018-{21010,20847,5727}/openjpeg2 fixed in sid
via 2.3.1-1.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3599,7 +3599,7 @@ CVE-2019-15925 (An issue was discovered in the Linux
kernel before 5.2.3. An out
[jessie] - linux <not-affected> (Vulnerable code introduced later)
NOTE:
https://git.kernel.org/linus/04f25edb48c441fc278ecc154c270f16966cbb90
CVE-2018-21010 (OpenJPEG before 2.3.1 has a heap buffer overflow in
color_apply_icc_pr ...)
- - openjpeg2 <unfixed> (bug #939553)
+ - openjpeg2 2.3.1-1 (bug #939553)
[buster] - openjpeg2 <no-dsa> (Minor issue)
[stretch] - openjpeg2 <no-dsa> (Minor issue)
NOTE:
https://github.com/uclouvain/openjpeg/commit/2e5ab1d9987831c981ff05862e8ccf1381ed58ea
@@ -13449,7 +13449,7 @@ CVE-2019-12966 (FeHelper through 2019-06-19 allows
arbitrary code execution duri
NOT-FOR-US: FeHelper
CVE-2018-20847 (An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in
the functi ...)
{DLA-1851-1}
- - openjpeg2 <unfixed> (low; bug #931294)
+ - openjpeg2 2.3.1-1 (low; bug #931294)
[buster] - openjpeg2 <no-dsa> (Minor issue)
[stretch] - openjpeg2 <no-dsa> (Minor issue)
NOTE:
https://github.com/uclouvain/openjpeg/commit/5d00b719f4b93b1445e6fb4c766b9a9883c57949
@@ -87301,7 +87301,7 @@ CVE-2018-5729 (MIT krb5 1.6 or later allows an
authenticated kadmin with permiss
CVE-2018-5728 (Cobham Sea Tel 121 build 222701 devices allow remote attackers
to obta ...)
NOT-FOR-US: Cobham Sea Tel 121 build 222701 devices
CVE-2018-5727 (In OpenJPEG 2.3.0, there is an integer overflow vulnerability
in the o ...)
- - openjpeg2 <unfixed> (unimportant; bug #888532)
+ - openjpeg2 2.3.1-1 (unimportant; bug #888532)
NOTE: https://github.com/uclouvain/openjpeg/issues/1053
NOTE:
https://github.com/rouault/openjpeg/commit/a1d32a596a94280178c44a55d7e
NOTE: ubsan error (integer overflow), no security impact per se and
unlikely
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/e388cd944d34bb7404f63561b5d6108f5fb115ab
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/e388cd944d34bb7404f63561b5d6108f5fb115ab
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
