[Git][security-tracker-team/security-tracker][master] Update information for liblouis issues

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a434a668 by Salvatore Bonaccorso at 2018-06-04T21:07:54+02:00
Update information for liblouis issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -55,20 +55,24 @@ CVE-2018-11687
 CVE-2018-11686
 	RESERVED
 CVE-2018-11685 (Liblouis 3.5.0 has a stack-based Buffer Overflow in the function ...)
-	- liblouis <unfixed>
+	- liblouis 3.5.0-3
 	[stretch] - liblouis <no-dsa> (Minor issue)
 	[jessie] - liblouis <no-dsa> (Minor issue)
 	NOTE: https://github.com/liblouis/liblouis/issues/593
+	NOTE: https://github.com/liblouis/liblouis/commit/b5049cb17ae3d15b2b26890de0e24d0fecc080f5
 CVE-2018-11684 (Liblouis 3.5.0 has a stack-based Buffer Overflow in the function ...)
-	- liblouis <unfixed>
+	- liblouis 3.5.0-3
 	[stretch] - liblouis <no-dsa> (Minor issue)
 	[jessie] - liblouis <no-dsa> (Minor issue)
 	NOTE: https://github.com/liblouis/liblouis/issues/592
+	NOTE: https://github.com/liblouis/liblouis/commit/fb2bfce4ed49ac4656a8f7e5b5526e4838da1dde
 CVE-2018-11683 (Liblouis 3.5.0 has a stack-based Buffer Overflow in the function ...)
-	- liblouis <unfixed>
+	- liblouis 3.5.0-3
 	[stretch] - liblouis <no-dsa> (Minor issue)
 	[jessie] - liblouis <no-dsa> (Minor issue)
 	NOTE: https://github.com/liblouis/liblouis/issues/591
+	NOTE: https://github.com/liblouis/liblouis/commit/e7eee2b7926668360a0d8e2abee6c35a00ebce3c
+	NOTE: https://github.com/liblouis/liblouis/commit/d4fc803687e38a5355fb686bf98cc082951f3043
 CVE-2017-18285 (The Gentoo app-backup/burp package before 2.1.32 has incorrect group ...)
 	- burp <not-affected> (/etc/burp is owned by root:root in Debian)
 CVE-2017-18284 (The Gentoo app-backup/burp package before 2.1.32 sets the ownership of ...)
@@ -308,7 +312,7 @@ CVE-2018-11579 (class-woo-banner-management.php in the MULTIDOTS WooCommerce Cat
 CVE-2018-11578 (GifIndexToTrueColor in ngiflib.c in MiniUPnP ngiflib 0.4 has a ...)
 	NOT-FOR-US: ngiflib
 CVE-2018-11577 (Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c. ...)
-	- liblouis <unfixed> (bug #900607)
+	- liblouis 3.5.0-3 (bug #900607)
 	[stretch] - liblouis <no-dsa> (Minor issue)
 	[jessie] - liblouis <no-dsa> (Minor issue)
 	NOTE: https://github.com/liblouis/liblouis/issues/582
@@ -650,7 +654,7 @@ CVE-2018-11442 (A CSRF issue was discovered in EasyService Billing 1.0, which wa
 CVE-2018-11441
 	RESERVED
 CVE-2018-11440 (Liblouis 3.5.0 has a stack-based Buffer Overflow in the function ...)
-	- liblouis <unfixed> (bug #900085)
+	- liblouis 3.5.0-3 (bug #900085)
 	[stretch] - liblouis <no-dsa> (Minor issue)
 	[jessie] - liblouis <no-dsa> (Minor issue)
 	NOTE: https://github.com/liblouis/liblouis/issues/575



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a434a668b3a4ea57e378a74af4c440c85b1fd0ca

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a434a668b3a4ea57e378a74af4c440c85b1fd0ca
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180604/7f98d123/attachment-0001.html>