[Git][security-tracker-team/security-tracker][master] 2 commits: Add commit reference for CVE-2018-1000222

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5f07e744 by Salvatore Bonaccorso at 2018-08-21T19:53:38Z
Add commit reference for CVE-2018-1000222

- - - - -
2bc4610b by Salvatore Bonaccorso at 2018-08-21T19:54:05Z
Sort entries top-down

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,7 +1,7 @@
 CVE-2018-XXXX [security issue with the PASS command and duplicate server instances]
 	- charybdis <unfixed> (bug #906879)
-	[jessie] - charybdis <not-affected> (Vulnerable code added later)
 	[stretch] - charybdis <not-affected> (Vulnerable code added later)
+	[jessie] - charybdis <not-affected> (Vulnerable code added later)
 	NOTE: partial fix: https://github.com/charybdis-ircd/charybdis/commit/d4b2529a61fb48ebcd54bc0fcc6f400f97bfe251
 CVE-2018-15604
 	RESERVED
@@ -31,6 +31,7 @@ CVE-2018-1000224 (Godot Engine version All versions prior to 2.1.5, all 3.0 vers
 CVE-2018-1000222 (Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability ...)
 	- libgd2 <unfixed>
 	NOTE: https://github.com/libgd/libgd/issues/447
+	NOTE: https://github.com/libgd/libgd/commit/ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5
 CVE-2018-1000221 (pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow ...)
 	- pkgconf <not-affected> (Vulnerable code introduced post 1.5.0)
 	NOTE: Fixed by: https://github.com/pkgconf/pkgconf/commit/9b7affe0b1e6512c6c73d19e1220c94fdb5c8159



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/18f6fde6f4a742a84babd5e3d757296d9fee4f12...2bc4610b4fb3ddfad245ed451ffe56b6d7f3e0c4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/18f6fde6f4a742a84babd5e3d757296d9fee4f12...2bc4610b4fb3ddfad245ed451ffe56b6d7f3e0c4
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180821/b71f58d1/attachment-0001.html>