[Git][security-tracker-team/security-tracker][master] Annotate commit related to exiv2/CVE-2018-12265

[Roberto C. Sánchez]

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker


Commits:
90c1be00 by Roberto C. Sánchez at 2018-06-28T00:10:13-04:00
Annotate commit related to exiv2/CVE-2018-12265

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1740,10 +1740,10 @@ CVE-2018-12266 (system\errors\404.php in HongCMS 3.0.0 has XSS via crafted input
 CVE-2018-12265 (Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in ...)
 	- exiv2 <unfixed> (bug #901706)
 	NOTE: https://github.com/Exiv2/exiv2/issues/365
+	NOTE: https://github.com/Exiv2/exiv2/commit/937a1a2bd067b8b3b787f3757089d972f3a39853
 CVE-2018-12264 (Exiv2 0.26 has integer overflows in LoaderTiff::getData() in ...)
 	- exiv2 <unfixed> (bug #901707)
 	NOTE: https://github.com/Exiv2/exiv2/issues/366
-	NOTE: https://github.com/Exiv2/exiv2/commit/937a1a2bd067b8b3b787f3757089d972f3a39853
 	NOTE: https://github.com/Exiv2/exiv2/commit/fe70939f54476e99046245ca69ff27012401f759
 CVE-2018-12263 (portfolioCMS 1.0.5 allows upload of arbitrary .php files via the ...)
 	NOT-FOR-US: portfolioCMS



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/90c1be00a7053c43b211c6643141bbc4793ac861

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/90c1be00a7053c43b211c6643141bbc4793ac861
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180628/7ee77c5a/attachment.html>