Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7e87821b by Salvatore Bonaccorso at 2020-01-09T21:43:16+01:00
Add CVE-2020-662{4,5}/jhead
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -253,9 +253,13 @@ CVE-2020-6627
CVE-2020-6626
RESERVED
CVE-2020-6625 (jhead through 3.04 has a heap-based buffer over-read in Get32s
when ca ...)
- TODO: check
+ - jhead <unfixed> (unimportant)
+ NOTE: https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858746
+ NOTE: Crash in CLI tool, no security impact
CVE-2020-6624 (jhead through 3.04 has a heap-based buffer over-read in
process_DQT in ...)
- TODO: check
+ - jhead <unfixed> (unimportant)
+ NOTE: https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858744
+ NOTE: Crash in CLI tool, no security impact
CVE-2020-6623 (stb stb_truetype.h through 1.22 has an assertion failure in
stbtt__cff ...)
TODO: check
CVE-2020-6622 (stb stb_truetype.h through 1.22 has a heap-based buffer
over-read in s ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/7e87821b955b9308a7189889599777968a6d89ae
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/7e87821b955b9308a7189889599777968a6d89ae
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
