Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1c96651f by Salvatore Bonaccorso at 2023-03-31T23:23:10+02:00
Revert "Mark CVE-2019-6245 and CVE-2019-6247 as fixed in
1.3.0+dfsg1-5"
This reverts commit de9e9f62f0570a51ec50f6c799d1e3981cede0c7.
See the CVE notes and ed43841f38719e4bc2339a4b3daf89f5bf9b47a7 .
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -294046,7 +294046,7 @@ CVE-2019-6248 (PHP Scripts Mall Citysearch / Hotfrog
/ Gelbeseiten Clone Script
NOT-FOR-US: PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone
Script
CVE-2019-6247 (An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as
used in SV ...)
{DLA-3376-1}
- - svgpp 1.3.0+dfsg1-5 (unimportant; bug #919321)
+ - svgpp <unfixed> (unimportant; bug #919321)
NOTE: https://github.com/svgpp/svgpp/issues/70
NOTE: Issue only in src:svgpp which does not call the AGG-API in
correct way.
NOTE: No security impact, only used to build examples, see #921097
@@ -294056,7 +294056,7 @@ CVE-2019-6246 (An issue was discovered in SVG++ (aka
svgpp) 1.2.3. After calling
CVE-2019-6245 (An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as
used in SV ...)
{DLA-3376-1 DLA-2872-1 DLA-1656-1}
- agg 1:2.4-r127+dfsg1-1 (low; bug #919322)
- - svgpp 1.3.0+dfsg1-5 (unimportant; bug #919321)
+ - svgpp <unfixed> (unimportant; bug #919321)
NOTE: https://github.com/svgpp/svgpp/issues/70
NOTE: Fixed in src:agg with: https://sourceforge.net/p/agg/svn/119/
NOTE: and possibly already fixed with the inclusion of
05-fix-recursion-crash.patch
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1c96651f37ea6acdc3334a5d980780d61119facf
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1c96651f37ea6acdc3334a5d980780d61119facf
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
