Neil Williams pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
27f7f748 by Neil Williams at 2022-03-24T11:00:24+00:00
CVE-2021-2827{5-8}/jhead 3.06.0.1-2
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -66893,13 +66893,20 @@ CVE-2021-28280 (CSRF + Cross-site scripting (XSS)
vulnerability in search.php in
CVE-2021-28279
RESERVED
CVE-2021-28278 (A Heap-based Buffer Overflow vulnerability exists in jhead
3.04 and 3. ...)
- TODO: check
+ - jhead 1:3.06.0.1-2
+ NOTE:
https://github.com/Matthias-Wandel/jhead/commit/a50953a266583981b51a181c2fce73dad2ac5d7d
(3.06.0.1)
+ NOTE: https://github.com/Matthias-Wandel/jhead/issues/15
CVE-2021-28277 (A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04
and 3.0 ...)
- TODO: check
+ - jhead 1:3.06.0.1-2
+ NOTE:
https://github.com/Matthias-Wandel/jhead/commit/b8d78e5ec982e86cdd70ebfc1ebbb2273c982eea
(3.06.0.1)
+ NOTE: https://github.com/Matthias-Wandel/jhead/issues/16
CVE-2021-28276 (A Denial of Service vulnerability exists in jhead 3.04 and
3.05 via a ...)
- TODO: check
+ TODO: check CVE reference, probably invalid report or old version.
+ NOTE: https://github.com/Matthias-Wandel/jhead/issues/26
CVE-2021-28275 (A Denial of Service vulnerability exists in jhead 3.04 and
3.05 due to ...)
- TODO: check
+ - jhead 1:3.06.0.1-2
+ NOTE:
https://github.com/Matthias-Wandel/jhead/commit/a50953a266583981b51a181c2fce73dad2ac5d7d
(3.06.0.1)
+ NOTE: https://github.com/Matthias-Wandel/jhead/issues/17
CVE-2021-28274
RESERVED
CVE-2021-28273
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27f7f7482acfdc8c0d22a9aec586c486f144c527
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27f7f7482acfdc8c0d22a9aec586c486f144c527
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits