Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8049ad5c by Salvatore Bonaccorso at 2021-07-31T20:45:01+02:00
Update information for CVE-2018-12093/tinyexr
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -200786,7 +200786,8 @@ CVE-2018-12095 (A Reflected Cross-Site Scripting web
vulnerability has been disc
CVE-2018-12094 (Cross-site scripting (XSS) vulnerability in news.php in
Dimofinf CMS V ...)
NOT-FOR-US: Dimofinf CMS
CVE-2018-12093 (tinyexr 0.9.5 has a memory leak in ParseEXRHeaderFromMemory in
tinyexr ...)
- NOT-FOR-US: tinyexr
+ - tinyexr <not-affected> (Fixed with initial upload to Debian)
+ NOTE: https://github.com/syoyo/tinyexr/issues/79
CVE-2018-12092 (tinyexr 0.9.5 has a heap-based buffer over-read in
tinyexr::DecodePixe ...)
- tinyexr <not-affected> (Fixed with initial upload to Debian)
NOTE: https://github.com/syoyo/tinyexr/issues/78
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8049ad5c5b76207d8048510a29078b1e0f2e78e3
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8049ad5c5b76207d8048510a29078b1e0f2e78e3
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
