[Git][security-tracker-team/security-tracker][master] Reference upstream commit for CVE-2018-581{7,8,9}/libraw

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cee41913 by Salvatore Bonaccorso at 2018-12-22T11:49:32Z
Reference upstream commit for CVE-2018-581{7,8,9}/libraw

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -45776,14 +45776,17 @@ CVE-2018-5819 [DoS in parse_sinar_ia function in internal/dcraw_common.cpp]
 	RESERVED
 	- libraw 0.19.1-1
 	NOTE: https://www.flexera.com/company/secunia-research/advisories/SR-2018-27.html
+	NOTE: https://github.com/LibRaw/LibRaw/commit/9eb76dc153f5acf42ec7325a33fe7ccdcadaf8d6
 CVE-2018-5818 [DoS in parse_rollei function in internal/dcraw_common.cpp]
 	RESERVED
 	- libraw 0.19.1-1
 	NOTE: https://www.flexera.com/company/secunia-research/advisories/SR-2018-27.html
+	NOTE: https://github.com/LibRaw/LibRaw/commit/9eb76dc153f5acf42ec7325a33fe7ccdcadaf8d6
 CVE-2018-5817 [DoS in unpacked_load_raw function in internal/dcraw_common.cpp]
 	RESERVED
 	- libraw 0.19.1-1
 	NOTE: https://www.flexera.com/company/secunia-research/advisories/SR-2018-27.html
+	NOTE: https://github.com/LibRaw/LibRaw/commit/9eb76dc153f5acf42ec7325a33fe7ccdcadaf8d6
 CVE-2018-5816 (An integer overflow error within the "identify()" function ...)
 	- libraw 0.18.13-1 (low)
 	[stretch] - libraw <not-affected> (Fix for CVE-2018-5804 not released in stretch)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/cee419133d86c4b32168ec5705680809d81b5a04

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/cee419133d86c4b32168ec5705680809d81b5a04
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181222/ebe346f5/attachment.html>