[Git][security-tracker-team/security-tracker][master] 2 commits: Process NFUs

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8499926c by Salvatore Bonaccorso at 2018-07-10T22:38:11+02:00
Process NFUs

- - - - -
79a7c148 by Salvatore Bonaccorso at 2018-07-10T22:38:12+02:00
Add three new htslib issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -15,19 +15,22 @@ CVE-2018-13851
 CVE-2018-13850 (The "Firebase Cloud Messaging (FCM) + Advance Admin Panel" component ...)
 	TODO: check
 CVE-2018-13849 (edit_requests.php in yTakkar Instagram-clone through 2018-04-23 has XSS ...)
-	TODO: check
+	NOT-FOR-US: yTakkar Instagram-clone
 CVE-2018-13848 (An issue has been found in Bento4 1.5.1-624. It is a SEGV in ...)
-	TODO: check
+	NOT-FOR-US: Bento4
 CVE-2018-13847 (An issue has been found in Bento4 1.5.1-624. It is a SEGV in ...)
-	TODO: check
+	NOT-FOR-US: Bento4
 CVE-2018-13846 (An issue has been found in Bento4 1.5.1-624. ...)
-	TODO: check
+	NOT-FOR-US: Bento4
 CVE-2018-13845 (An issue has been found in HTSlib 1.8. It is a buffer over-read in ...)
-	TODO: check
+	- htslib <unfixed>
+	NOTE: https://github.com/samtools/htslib/issues/731#issuecomment-403681105
 CVE-2018-13844 (An issue has been found in HTSlib 1.8. It is a memory leak in fai_read ...)
-	TODO: check
+	- htslib <unfixed>
+	NOTE: https://github.com/samtools/htslib/issues/731#issuecomment-403675330
 CVE-2018-13843 (An issue has been found in HTSlib 1.8. It is a memory leak in ...)
-	TODO: check
+	- htslib <unfixed>
+	NOTE: https://github.com/samtools/htslib/issues/731#issue-339662537
 CVE-2018-13842
 	RESERVED
 CVE-2018-13841



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/fb6568f458893d6e62e82d9bf971aa1a7332f21b...79a7c148eeeb24835624184a40d83748f68cbc63

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/fb6568f458893d6e62e82d9bf971aa1a7332f21b...79a7c148eeeb24835624184a40d83748f68cbc63
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180710/4d4ef9dd/attachment.html>