[Git][security-tracker-team/security-tracker][master] Add two new libraw issues

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e1db095b by Salvatore Bonaccorso at 2018-04-29T10:21:10+02:00
Add two new libraw issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,9 +1,13 @@
 CVE-2018-10530
 	RESERVED
 CVE-2018-10529 (An issue was discovered in LibRaw 0.18.9. There is an out-of-bounds ...)
-	TODO: check
+	- libraw <unfixed>
+	NOTE: https://github.com/LibRaw/LibRaw/commit/f0c505a3e5d47989a5f69be2d0d4f250af6b1a6c
+	NOTE: https://github.com/LibRaw/LibRaw/issues/144
 CVE-2018-10528 (An issue was discovered in LibRaw 0.18.9. There is a stack-based buffer ...)
-	TODO: check
+	- libraw <unfixed>
+	NOTE: https://github.com/LibRaw/LibRaw/commit/895529fc2f2eb8bc633edd6b04b5b237eb4db564
+	NOTE: https://github.com/LibRaw/LibRaw/issues/144
 CVE-2018-10527 (EasyCMS 1.3 is prone to Stored XSS when posting an article; four fields ...)
 	NOT-FOR-US: EasyCMS
 CVE-2018-10526



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e1db095b9362c93336deeaa54bfe8827c5fb4bce

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e1db095b9362c93336deeaa54bfe8827c5fb4bce
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180429/ec95a0fa/attachment.html>