[Git][security-tracker-team/security-tracker][master] 2 commits: follow security team with no-dsa for CVE-2018-3847

[Thorsten Alteholz]

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c33417dc by Thorsten Alteholz at 2018-08-03T12:15:49Z
follow security team with no-dsa for CVE-2018-3847

- - - - -
92032988 by Thorsten Alteholz at 2018-08-03T12:17:15Z
follow security team with no-dsa for libraw CVEs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -24463,6 +24463,7 @@ CVE-2018-5815 [Integer overflow in internal/dcraw_common.cpp:parse_qt() allows f
 	RESERVED
 	- libraw 0.18.13-1 (low)
 	[stretch] - libraw <no-dsa> (Minor issue)
+	[jessie] - libraw <no-dsa> (Minor issue)
 	NOTE: http://seclists.org/bugtraq/2018/Jul/58
 CVE-2018-5814 (In the Linux Kernel before version 4.16.11, 4.14.43, 4.9.102, and ...)
 	{DLA-1423-1 DLA-1422-1}
@@ -24474,21 +24475,25 @@ CVE-2018-5813 [infinite loop in the parse_minolta function in dcraw/dcraw.c]
 	RESERVED
 	- libraw 0.18.11-1 (low)
 	[stretch] - libraw <no-dsa> (Minor issue)
+	[jessie] - libraw <no-dsa> (Minor issue)
 	NOTE: https://secuniaresearch.flexerasoftware.com/secunia_research/2018-13/
 CVE-2018-5812 [NULL pointer dereference in nikon_coolscan_load_raw internal/dcraw_common.cpp]
 	RESERVED
 	- libraw 0.18.11-1
 	[stretch] - libraw <no-dsa> (Minor issue)
+	[jessie] - libraw <no-dsa> (Minor issue)
 	NOTE: https://secuniaresearch.flexerasoftware.com/secunia_research/2018-10/
 CVE-2018-5811 [out-of-bounds read in nikon_coolscan_load_raw internal/dcraw_common.cpp]
 	RESERVED
 	- libraw 0.18.11-1
 	[stretch] - libraw <no-dsa> (Minor issue)
+	[jessie] - libraw <no-dsa> (Minor issue)
 	NOTE: https://secuniaresearch.flexerasoftware.com/secunia_research/2018-10/
 CVE-2018-5810 [heap-based buffer overflow in rollei_load_raw internal/dcraw_common.cpp]
 	RESERVED
 	- libraw 0.18.11-1
 	[stretch] - libraw <no-dsa> (Minor issue)
+	[jessie] - libraw <no-dsa> (Minor issue)
 	NOTE: https://secuniaresearch.flexerasoftware.com/secunia_research/2018-10/
 CVE-2018-5809
 	RESERVED
@@ -24498,6 +24503,7 @@ CVE-2018-5807 [out-of-bounds read in samsung_load_raw internal/dcraw_common.cpp]
 	RESERVED
 	- libraw 0.18.11-1
 	[stretch] - libraw <no-dsa> (Minor issue)
+	[jessie] - libraw <no-dsa> (Minor issue)
 	NOTE: https://secuniaresearch.flexerasoftware.com/secunia_research/2018-10/
 CVE-2018-5806 [NULL pointer dereference in leaf_hdr_load_raw() function in internal/dcraw_common.cpp]
 	RESERVED
@@ -29401,6 +29407,7 @@ CVE-2018-3848 (In the ffghbn function in NASA CFITSIO 3.42, specially crafted im
 CVE-2018-3847 (Multiple exploitable buffer overflow vulnerabilities exist in image ...)
 	- cfitsio 3.430-1 (low; bug #892458)
 	[stretch] - cfitsio <no-dsa> (Minor issue)
+	[jessie] - cfitsio <no-dsa> (Minor issue)
 	NOTE: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0530
 	TODO: double-check
 CVE-2018-3846 (In the ffgphd and ffgtkn functions in NASA CFITSIO 3.42, specially ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/f7613afe54bf56aa6f0db85229fea3c6890307eb...920329884c0600c9d1277901c50f452616fc2b8c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/f7613afe54bf56aa6f0db85229fea3c6890307eb...920329884c0600c9d1277901c50f452616fc2b8c
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180803/4fae7f9a/attachment.html>