Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
16b4f8fe by Moritz Muehlenhoff at 2022-03-14T18:03:39+01:00
update one netpbm-free issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -324327,8 +324327,11 @@ CVE-2017-2583 (The load_segment_descriptor
implementation in arch/x86/kvm/emulat
CVE-2017-2582 (It was found that while parsing the SAML messages the
StaxParserUtil c ...)
NOT-FOR-US: Keycloak
CVE-2017-2581 (An out-of-bounds write vulnerability was found in netpbm before
10.61. ...)
- - netpbm-free <undetermined> (bug #854978)
- NOTE: Debian uses an old fork of netpbm
+ - netpbm-free 2:10.97.00-1 (bug #854978)
+ [bullseye] - netpbm-free <not-affected> (Legacy fork not affected)
+ [buster] - netpbm-free <not-affected> (Legacy fork not affected)
+ [stretch] - netpbm-free <not-affected> (Legacy fork not affected)
+ NOTE: Debian uses an old fork of netpbm, switched to current releases
as of 2:10.97.00-1
NOTE: https://www.openwall.com/lists/oss-security/2017/02/05/7
NOTE: PoC+report attached to #854978
NOTE: Similar code path seems protected by earlier stricter size checks
("object too large")
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/16b4f8feb2d211dd91478464879c635f251dbb27
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/16b4f8feb2d211dd91478464879c635f251dbb27
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
