Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
41aaa92e by Salvatore Bonaccorso at 2021-07-31T20:44:06+02:00
Update information for CVE-2018-12092/tinyexr
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -200788,7 +200788,8 @@ CVE-2018-12094 (Cross-site scripting (XSS)
vulnerability in news.php in Dimofinf
CVE-2018-12093 (tinyexr 0.9.5 has a memory leak in ParseEXRHeaderFromMemory in
tinyexr ...)
NOT-FOR-US: tinyexr
CVE-2018-12092 (tinyexr 0.9.5 has a heap-based buffer over-read in
tinyexr::DecodePixe ...)
- NOT-FOR-US: tinyexr
+ - tinyexr <not-affected> (Fixed with initial upload to Debian)
+ NOTE: https://github.com/syoyo/tinyexr/issues/78
CVE-2018-12091
RESERVED
CVE-2018-12090 (There is unauthenticated reflected cross-site scripting (XSS)
in LAMS ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/41aaa92e240a936f99609b0cceb6b24e1520e7cc
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/41aaa92e240a936f99609b0cceb6b24e1520e7cc
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
