Neil Williams pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
27f7f748 by Neil Williams at 2022-03-24T11:00:24+00:00
CVE-2021-2827{5-8}/jhead 3.06.0.1-2

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -66893,13 +66893,20 @@ CVE-2021-28280 (CSRF + Cross-site scripting (XSS) 
vulnerability in search.php in
 CVE-2021-28279
        RESERVED
 CVE-2021-28278 (A Heap-based Buffer Overflow vulnerability exists in jhead 
3.04 and 3. ...)
-       TODO: check
+       - jhead 1:3.06.0.1-2
+       NOTE: 
https://github.com/Matthias-Wandel/jhead/commit/a50953a266583981b51a181c2fce73dad2ac5d7d
 (3.06.0.1)
+       NOTE: https://github.com/Matthias-Wandel/jhead/issues/15
 CVE-2021-28277 (A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 
and 3.0 ...)
-       TODO: check
+       - jhead 1:3.06.0.1-2
+       NOTE: 
https://github.com/Matthias-Wandel/jhead/commit/b8d78e5ec982e86cdd70ebfc1ebbb2273c982eea
 (3.06.0.1)
+       NOTE: https://github.com/Matthias-Wandel/jhead/issues/16
 CVE-2021-28276 (A Denial of Service vulnerability exists in jhead 3.04 and 
3.05 via a  ...)
-       TODO: check
+       TODO: check CVE reference, probably invalid report or old version.
+       NOTE: https://github.com/Matthias-Wandel/jhead/issues/26
 CVE-2021-28275 (A Denial of Service vulnerability exists in jhead 3.04 and 
3.05 due to ...)
-       TODO: check
+       - jhead 1:3.06.0.1-2
+       NOTE: 
https://github.com/Matthias-Wandel/jhead/commit/a50953a266583981b51a181c2fce73dad2ac5d7d
 (3.06.0.1)
+       NOTE: https://github.com/Matthias-Wandel/jhead/issues/17
 CVE-2021-28274
        RESERVED
 CVE-2021-28273



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27f7f7482acfdc8c0d22a9aec586c486f144c527

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27f7f7482acfdc8c0d22a9aec586c486f144c527
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to