[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add TALOS references to libsdl2-image issues

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
902ca66a by Salvatore Bonaccorso at 2018-03-04T22:29:40+01:00
Add TALOS references to libsdl2-image issues

Thanks: Felix Geyer

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -28830,15 +28830,21 @@ CVE-2017-14452
 	RESERVED
 CVE-2017-14451
 	RESERVED
-CVE-2017-14450
+CVE-2017-14450 [Simple DirectMedia Layer SDL2_Image LWZ Decompression Buffer Overflow Vulnerability]
 	RESERVED
 	- libsdl2-image 2.0.3+dfsg1-1
-CVE-2017-14449
+	NOTE: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0499
+	TODO: check sdl-image1.2
+CVE-2017-14449 [Simple DirectMedia Layer SDL2_image do_layer_surface Double-Free Vulnerability]
 	RESERVED
 	- libsdl2-image 2.0.3+dfsg1-1
-CVE-2017-14448
+	NOTE: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0498
+	TODO: check sdl-image1.2
+CVE-2017-14448 [Simple DirectMedia Layer SDL2_image load_xcf_tile_rle Decompression Code Execution Vulnerability]
 	RESERVED
 	- libsdl2-image 2.0.3+dfsg1-1
+	NOTE: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0497
+	TODO: check sdl-image1.2
 CVE-2017-14447
 	RESERVED
 CVE-2017-14446
@@ -28849,15 +28855,21 @@ CVE-2017-14444
 	RESERVED
 CVE-2017-14443
 	RESERVED
-CVE-2017-14442
+CVE-2017-14442 [Simple DirectMedia Layer SDL2_image Image Palette Population Code Execution Vulnerability]
 	RESERVED
 	- libsdl2-image 2.0.3+dfsg1-1
-CVE-2017-14441
+	NOTE: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0491
+	TODO: check sdl-image1.2
+CVE-2017-14441 [Simple DirectMedia Layer SDL2_image ICO Pitch Handling Code Execution Vulnerability]
 	RESERVED
 	- libsdl2-image 2.0.3+dfsg1-1
-CVE-2017-14440
+	NOTE: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0490
+	TODO: check sdl-image1.2
+CVE-2017-14440 [Simple DirectMedia Layer SDL2_image ILBM CMAP Parsing Code Execution Vulnerability]
 	RESERVED
 	- libsdl2-image 2.0.3+dfsg1-1
+	NOTE: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0489
+	TODO: check sdl-image1.2
 CVE-2017-14439
 	RESERVED
 CVE-2017-14438
@@ -35801,9 +35813,11 @@ CVE-2017-12124
 	RESERVED
 CVE-2017-12123
 	RESERVED
-CVE-2017-12122
+CVE-2017-12122 [Simple DirectMedia Layer SDL2_Image IMG_LoadLBM_RW Code Execution Vulnerability]
 	RESERVED
 	- libsdl2-image 2.0.3+dfsg1-1
+	NOTE: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0488
+	TODO: check sdl-image1.2
 CVE-2017-12121
 	RESERVED
 CVE-2017-12120



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/902ca66a311329cf5529429a70f50f4cbd466a14

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/902ca66a311329cf5529429a70f50f4cbd466a14
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180304/c2888aef/attachment-0001.html>