Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
dd1443ba by Salvatore Bonaccorso at 2023-05-07T21:39:18+02:00
Update information on CVE-2023-1729/libraw
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6702,9 +6702,11 @@ CVE-2023-1730 (The SupportCandy WordPress plugin before
3.1.5 does not validate
NOT-FOR-US: WordPress plugin
CVE-2023-1729
RESERVED
- - libraw <undetermined>
+ - libraw <unfixed>
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2188240
- TODO: check, no details provided by RH yet
+ NOTE: https://github.com/LibRaw/LibRaw/issues/557
+ NOTE: Fixed by:
https://github.com/LibRaw/LibRaw/commit/9ab70f6dca19229cb5caad7cc31af4e7501bac93
(master)
+ NOTE: Fixed by:
https://github.com/LibRaw/LibRaw/commit/477e0719ffc07190c89b4f3d12d51b1292e75828
(0.21-stable)
CVE-2023-1728 (Unrestricted Upload of File with Dangerous Type vulnerability
in Fernu ...)
NOT-FOR-US: Fernus Informatics LMS
CVE-2023-1727
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd1443baf591263024db0c6a918fc3c24d0576e3
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd1443baf591263024db0c6a918fc3c24d0576e3
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
