Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3f12e361 by Salvatore Bonaccorso at 2020-06-01T09:27:25+02:00
Map specific GHSL issues for sane-backends directly to assigned CVEs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1801,6 +1801,7 @@ CVE-2020-12867
[experimental] - sane-backends 1.0.30-1~experimental1
- sane-backends <unfixed> (bug #961302)
NOTE: https://gitlab.com/sane-project/backends/-/issues/279
+ NOTE:
https://gitlab.com/sane-project/backends/-/issues/279#issue-1-ghsl-2020-075-null-pointer-dereference-in-sanei_epson_net_read
NOTE:
https://alioth-lists.debian.net/pipermail/sane-announce/2020/000041.html
CVE-2020-12866
RESERVED
@@ -1808,6 +1809,7 @@ CVE-2020-12866
- sane-backends <unfixed> (bug #961302)
[jessie] - sane-backends <not-affected> (epsonds backend was added in
1.0.25)
NOTE: https://gitlab.com/sane-project/backends/-/issues/279
+ NOTE:
https://gitlab.com/sane-project/backends/-/issues/279#issue-2-ghsl-2020-079-null-pointer-dereference-in-epsonds_net_read
NOTE:
https://alioth-lists.debian.net/pipermail/sane-announce/2020/000041.html
CVE-2020-12865
RESERVED
@@ -1815,6 +1817,7 @@ CVE-2020-12865
- sane-backends <unfixed> (bug #961302)
[jessie] - sane-backends <not-affected> (epsonds backend was added in
1.0.25)
NOTE: https://gitlab.com/sane-project/backends/-/issues/279
+ NOTE:
https://gitlab.com/sane-project/backends/-/issues/279#issue-9-ghsl-2020-084-buffer-overflow-in-esci2_img
NOTE:
https://alioth-lists.debian.net/pipermail/sane-announce/2020/000041.html
CVE-2020-12864
RESERVED
@@ -1822,6 +1825,7 @@ CVE-2020-12864
- sane-backends <unfixed> (bug #961302)
[jessie] - sane-backends <not-affected> (epsonds backend was added in
1.0.25)
NOTE: https://gitlab.com/sane-project/backends/-/issues/279
+ NOTE:
https://gitlab.com/sane-project/backends/-/issues/279#issue-4-ghsl-2020-081-reading-uninitialized-data-in-epsonds_net_read
NOTE:
https://alioth-lists.debian.net/pipermail/sane-announce/2020/000041.html
CVE-2020-12863
RESERVED
@@ -1829,6 +1833,7 @@ CVE-2020-12863
- sane-backends <unfixed> (bug #961302)
[jessie] - sane-backends <not-affected> (epsonds backend was added in
1.0.25)
NOTE: https://gitlab.com/sane-project/backends/-/issues/279
+ NOTE:
https://gitlab.com/sane-project/backends/-/issues/279#issue-7-ghsl-2020-083-out-of-bounds-read-in-esci2_check_header
NOTE:
https://alioth-lists.debian.net/pipermail/sane-announce/2020/000041.html
CVE-2020-12862
RESERVED
@@ -1836,6 +1841,7 @@ CVE-2020-12862
- sane-backends <unfixed> (bug #961302)
[jessie] - sane-backends <not-affected> (epsonds backend was added in
1.0.25)
NOTE: https://gitlab.com/sane-project/backends/-/issues/279
+ NOTE:
https://gitlab.com/sane-project/backends/-/issues/279#issue-5-ghsl-2020-082-out-of-bounds-read-in-decode_binary
NOTE:
https://alioth-lists.debian.net/pipermail/sane-announce/2020/000041.html
CVE-2020-12861
RESERVED
@@ -1843,6 +1849,7 @@ CVE-2020-12861
- sane-backends <unfixed> (bug #961302)
[jessie] - sane-backends <not-affected> (epsonds backend was added in
1.0.25)
NOTE: https://gitlab.com/sane-project/backends/-/issues/279
+ NOTE:
https://gitlab.com/sane-project/backends/-/issues/279#issue-3-ghsl-2020-080-heap-buffer-overflow-in-epsonds_net_read
NOTE:
https://alioth-lists.debian.net/pipermail/sane-announce/2020/000041.html
CVE-2020-12860 (COVIDSafe through v1.0.17 allows a remote attacker to access
phone nam ...)
NOT-FOR-US: COVIDSafe
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3f12e3611ab7a319a611761f4a42c46df53b210d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3f12e3611ab7a319a611761f4a42c46df53b210d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
