Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b3249545 by Salvatore Bonaccorso at 2023-11-22T08:23:06+01:00
Add CVE-2023-6228/tiff
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5,6 +5,10 @@ CVE-2023-6238 [nvme: memory corruption via unprivileged user
passthrough]
[buster] - linux <not-affected> (Vulnerable code not present)
CVE-2023-6235 (An uncontrolled search path element vulnerability has been
found in th ...)
NOT-FOR-US: Duet Display for Windows
+CVE-2023-6228 [heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c]
+ - tiff <unfixed>
+ NOTE: https://gitlab.com/libtiff/libtiff/-/issues/606
+ NOTE: Fixed by:
https://gitlab.com/libtiff/libtiff/-/commit/1e7d217a323eac701b134afc4ae39b6bdfdbc96a
CVE-2023-6213 (Memory safety bugs present in Firefox 119. Some of these bugs
showed e ...)
- firefox 120.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2023-49/#CVE-2023-6213
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b32495450442d807678789a983c582860178177a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b32495450442d807678789a983c582860178177a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
