[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Mark chromium-browser as end-of-life for jessie
Salvatore Bonaccorso
carnil at debian.org
Mon Feb 5 05:21:21 UTC 2018
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
9087c027 by Salvatore Bonaccorso at 2018-02-05T06:20:39+01:00
Mark chromium-browser as end-of-life for jessie
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -185,6 +185,7 @@ CVE-2018-6549
RESERVED
CVE-2018-6548 (A use-after-free issue was discovered in libwebm through 2018-02-02. If ...)
- chromium-browser <unfixed>
+ [jessie] - chromium-browser <end-of-life> (End of life, see DSA 4020)
[wheezy] - chromium-browser <end-of-life> (Not supported in wheezy LTS)
NOTE: https://bugs.chromium.org/p/webm/issues/detail?id=1493
NOTE: https://github.com/dwfault/PoCs/blob/master/libwebm%20Vp9HeaderParser%20UAF%20by%20PrintVP9Info/libwebm%20Vp9HeaderParser%20UAF%20by%20PrintVP9Info.md
@@ -605,6 +606,7 @@ CVE-2018-6407 (An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21
NOT-FOR-US: CIPCAMPTIWL devices
CVE-2018-6406 (The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in ...)
- chromium-browser <unfixed>
+ [jessie] - chromium-browser <end-of-life> (End of life, see DSA 4020)
[wheezy] - chromium-browser <end-of-life> (Not supported in wheezy LTS)
NOTE: https://bugs.chromium.org/p/webm/issues/detail?id=1492
NOTE: https://github.com/dwfault/PoCs/blob/master/libwebm%20ParseVP9SuperFrameIndex%20memory%20corruption/libwebm%20ParseVP9SuperFrameIndex%20OOB%20read.md
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9087c0273dad6007cd134c0caea0ceb152e8478d
---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9087c0273dad6007cd134c0caea0ceb152e8478d
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180205/59e9d006/attachment.html>
More information about the Secure-testing-commits
mailing list