Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
749869ce by Jeremy Bicha at 2022-12-06T10:12:44-05:00
Add fixed version for gnome-sushi CVE-2019-19308
- - - - -
a4bd3b21 by Salvatore Bonaccorso at 2022-12-06T15:20:26+00:00
Merge branch 'sushi-2019-19308' into 'master'
Add fixed version for gnome-sushi CVE-2019-19308
See merge request security-tracker-team/security-tracker!119
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -224164,9 +224164,10 @@ CVE-2019-19330 (The HTTP/2 implementation in HAProxy
before 2.0.10 mishandles he
NOTE:
https://git.haproxy.org/?p=haproxy.git;a=commit;h=146f53ae7e97dbfe496d0445c2802dd0a30b0878
CVE-2019-19308 (In text_to_glyphs in sushi-font-widget.c in gnome-font-viewer
3.34.0, ...)
- gnome-font-viewer 3.34.0-2 (unimportant)
- - gnome-sushi <unfixed> (unimportant)
+ - gnome-sushi 3.38.0-1 (unimportant)
NOTE: https://gitlab.gnome.org/GNOME/gnome-font-viewer/issues/17
NOTE:
https://gitlab.gnome.org/GNOME/gnome-font-viewer/commit/9661683379806e2bad6a52ce6dde776a33f4f981
+ NOTE:
https://gitlab.gnome.org/GNOME/sushi/-/commit/74e95963bd088b62f4f1de381c1e3ce45bbd5615
NOTE: Crash in GUI tool, no security impact
CVE-2019-19307 (An integer overflow in parse_mqtt in mongoose.c in Cesanta
Mongoose 6. ...)
NOT-FOR-US: Cesanta Mongoose
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5d4c2566e5ff7fbb12aa80730d49c7085ac77466...a4bd3b21e5f2f174f8c2a6dddee1cb5485de1f26
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5d4c2566e5ff7fbb12aa80730d49c7085ac77466...a4bd3b21e5f2f174f8c2a6dddee1cb5485de1f26
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
