Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
da9f4cab by Salvatore Bonaccorso at 2019-11-22T21:07:18Z
Add CVE-2019-508{6,7}/xcftools
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -43698,9 +43698,13 @@ CVE-2019-5089 (An exploitable memory corruption
vulnerability exists in Investin
CVE-2019-5088 (An exploitable memory corruption vulnerability exists in
Investintech ...)
NOT-FOR-US: Investintech
CVE-2019-5087 (An exploitable integer overflow vulnerability exists in the
flattenInc ...)
- TODO: check
+ - xcftools <unfixed>
+ NOTE: https://github.com/j-jorge/xcftools/issues/13
+ NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2019-0879
CVE-2019-5086 (An exploitable integer overflow vulnerability exists in the
flattenInc ...)
- TODO: check
+ - xcftools <unfixed>
+ NOTE: https://github.com/j-jorge/xcftools/issues/12
+ NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2019-0878
CVE-2019-5085
RESERVED
CVE-2019-5084 (An exploitable heap out-of-bounds write vulnerability exists in
the TI ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/da9f4cab266be952d8f90084ca844925671ad7dd
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/da9f4cab266be952d8f90084ca844925671ad7dd
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
