[Git][security-tracker-team/security-tracker][master] 2 commits: Add CVE-2018-10393/libvorbis

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
11c54f35 by Salvatore Bonaccorso at 2018-04-26T10:22:33+02:00
Add CVE-2018-10393/libvorbis

- - - - -
a886da22 by Salvatore Bonaccorso at 2018-04-26T10:23:43+02:00
Add CVE-2018-10392/libvorbis

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -67,9 +67,11 @@ CVE-2018-10395
 CVE-2018-10394
 	RESERVED
 CVE-2018-10393 (bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a ...)
-	TODO: check
+	- libvorbis <unfixed>
+	NOTE: https://gitlab.xiph.org/xiph/vorbis/issues/2334
 CVE-2018-10392 (mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not ...)
-	TODO: check
+	- libvorbis <unfixed>
+	NOTE: https://gitlab.xiph.org/xiph/vorbis/issues/2335
 CVE-2018-10391 (An issue was discovered in WUZHI CMS 4.1.0. There is XSS via the email ...)
 	TODO: check
 CVE-2018-10390



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/ecc9f96e425b76d5e1fb679d338a3f9ac7d8d608...a886da2273b3b0d54e2b58645c4217aebc57a4cb

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/ecc9f96e425b76d5e1fb679d338a3f9ac7d8d608...a886da2273b3b0d54e2b58645c4217aebc57a4cb
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180426/baa18b90/attachment-0001.html>