[Git][security-tracker-team/security-tracker][master] Process two giflib issues

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3746afa5 by Salvatore Bonaccorso at 2018-06-06T21:38:40+02:00
Process two giflib issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -844,15 +844,15 @@ CVE-2018-11492
 CVE-2018-11491
 	RESERVED
 CVE-2018-11490 (The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly ...)
-	- giflib <undetermined>
+	- giflib <unfixed>
 	NOTE: https://github.com/pts/sam2p/issues/38
+	NOTE: https://sourceforge.net/p/giflib/bugs/113/
 	NOTE: Issue was reported against sam2p but issue is in dgif_lib.c from giflib.
-	TODO: check
 CVE-2018-11489 (The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly ...)
-	- giflib <undetermined>
+	- giflib <unfixed>
 	NOTE: https://github.com/pts/sam2p/issues/37
+	NOTE: https://sourceforge.net/p/giflib/bugs/112/
 	NOTE: Issue was reported against sam2p but issue is in dgif_lib.c from giflib.
-	TODO: check
 CVE-2018-11488 (A stack exhaustion vulnerability in the search function of dtSearch ...)
 	NOT-FOR-US: dtSearch
 CVE-2018-11487 (PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/3746afa5870aba854f8fff5b9deb5186291f3389

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/3746afa5870aba854f8fff5b9deb5186291f3389
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180606/94e869fc/attachment.html>