Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6e324a1d by Salvatore Bonaccorso at 2020-06-14T21:47:32+02:00
Add Debian bug reference for CVE-2020-13790/libjpeg-turbo
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -699,7 +699,7 @@ CVE-2020-13791 (hw/pci/pci.c in QEMU 4.2.0 allows guest OS
users to trigger an o
NOTE: https://www.openwall.com/lists/oss-security/2020/06/04/1
NOTE:
https://lists.gnu.org/archive/html/qemu-devel/2020-06/msg00831.html
CVE-2020-13790 (libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based
buffer over-r ...)
- - libjpeg-turbo <unfixed>
+ - libjpeg-turbo <unfixed> (bug #962829)
[jessie] - libjpeg-turbo <ignored> (No package in Debian jessie uses
the TurboJPEG API)
NOTE: https://github.com/libjpeg-turbo/libjpeg-turbo/issues/433
NOTE:
https://github.com/libjpeg-turbo/libjpeg-turbo/commit/1bfb0b5247f4fc8f6677639781ce468543490216
(1.5.x)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e324a1dfe42492df7036c7a905de9be0bca9403
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e324a1dfe42492df7036c7a905de9be0bca9403
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
