Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2041dd5f by Salvatore Bonaccorso at 2023-01-05T14:56:21+01:00
Update status for CVE-2021-36081/tesseract
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -111252,13 +111252,13 @@ CVE-2021-36082 (ntop nDPI 3.4 has a stack-based
buffer overflow in processClient
NOTE:
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ndpi/OSV-2021-304.yaml
NOTE:
https://github.com/ntop/nDPI/commit/1ec621c85b9411cc611652fd57a892cfef478af3
CVE-2021-36081 (Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict
use-after-fr ...)
- - tesseract <unfixed> (bug #990529)
+ - tesseract 5.1.0-1 (bug #990529)
[bullseye] - tesseract <no-dsa> (Minor issue)
[buster] - tesseract <no-dsa> (Minor issue)
[stretch] - tesseract <no-dsa> (Minor issue)
NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29698
NOTE:
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tesseract-ocr/OSV-2021-211.yaml
- NOTE:
https://github.com/tesseract-ocr/tesseract/commit/e6f15621c2ab2ecbfabf656942d8ef66f03b2d55
+ NOTE:
https://github.com/tesseract-ocr/tesseract/commit/e6f15621c2ab2ecbfabf656942d8ef66f03b2d55
(5.0.0-alpha-20210401)
CVE-2021-36080 (GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free
in bit_ ...)
- libredwg <itp> (bug #595191)
CVE-2020-36407 (libavif 0.8.0 and 0.8.1 has an out-of-bounds write in
avifDecoderDataF ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2041dd5fb3c9bf8088c2eb7b470eb2add0fecffb
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2041dd5fb3c9bf8088c2eb7b470eb2add0fecffb
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
