[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2017-1000450/opencv: Pull request reference

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6db1ac15 by Salvatore Bonaccorso at 2018-01-03T21:17:48+01:00
CVE-2017-1000450/opencv: Pull request reference

- - - - -
888aa0d7 by Salvatore Bonaccorso at 2018-01-03T21:29:37+01:00
Add bug reference for CVE-2017-1000450/opencv: #886282

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -2156,9 +2156,10 @@ CVE-2017-1000452 (An XML Signature Wrapping vulnerability exists in Samlify 2.2.
 CVE-2017-1000451 (fs-git is a file system like api for git repository. The fs-git ...)
 	TODO: check
 CVE-2017-1000450 (In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and ...)
-	- opencv <unfixed>
+	- opencv <unfixed> (bug #886282)
 	NOTE: https://github.com/opencv/opencv/issues/9723
 	NOTE: https://github.com/blendin/pocs/blob/master/opencv/0.OOB_Write_FillUniColor
+	NOTE: https://github.com/opencv/opencv/pull/9726
 CVE-2017-1000449 (BitThunder 0.9.2 stable is vulnerable to a buffer overflow in ...)
 	TODO: check
 CVE-2017-1000448 (Structured Data Linter versions 2.4.1 and older are vulnerable to a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/cb911271d0ac57f1f8edd2ba7feaadadec901ecc...888aa0d7b5007d0e9eb61930efe708eeac25dd3c

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/cb911271d0ac57f1f8edd2ba7feaadadec901ecc...888aa0d7b5007d0e9eb61930efe708eeac25dd3c
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180103/593c0ac5/attachment-0001.html>