[Git][security-tracker-team/security-tracker][master] lrzip, libgxps no-dsa

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3d8f2691 by Moritz Muehlenhoff at 2018-05-17T16:39:03+02:00
lrzip, libgxps no-dsa

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1021,6 +1021,8 @@ CVE-2018-10768 (There is a NULL pointer dereference in the AnnotPath::getCoordsL
 	NOTE: Fixed by: https://cgit.freedesktop.org/poppler/poppler/commit/?id=942adfc25e7a00ac3cf032ced2d8949e99099f70 (poppler-0.37)
 CVE-2018-10767 (There is a stack-based buffer over-read in calling GLib in the function ...)
 	- libgxps <unfixed> (bug #898133)
+	[stretch] - libgxps <no-dsa> (Minor issue)
+	[jessie] - libgxps <no-dsa> (Minor issue)
 	[wheezy] - libgxps <ignored> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1575188
 	TODO: check (in particular if reported upstream)
@@ -1104,6 +1106,8 @@ CVE-2018-10734 (KONGTOP DVR devices A303, A403, D303, D305, and D403 contain a .
 	NOT-FOR-US: KONGTOP DVR devices
 CVE-2018-10733 (There is a heap-based buffer over-read in the function ...)
 	- libgxps <unfixed> (low; bug #897954)
+	[stretch] - libgxps <no-dsa> (Minor issue)
+	[jessie] - libgxps <no-dsa> (Minor issue)
 	[wheezy] - libgxps <ignored> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1574844
 	NOTE: https://git.gnome.org/browse/libgxps/commit/?id=b458226e162fe1ffe7acb4230c114a52ada5131b
@@ -1208,7 +1212,9 @@ CVE-2018-10687
 CVE-2018-10686 (An issue was discovered in Vesta Control Panel 0.9.8-20. There is ...)
 	NOT-FOR-US:  Vesta Control Panel
 CVE-2018-10685 (In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in the ...)
-	- lrzip <unfixed> (bug #897645)
+	- lrzip <unfixed> (low; bug #897645)
+	[stretch] - lrzip <no-dsa> (Minor issue)
+	[jessie] - lrzip <no-dsa> (Minor issue)
 	[wheezy] - lrzip <ignored> (Minor issue)
 	NOTE: https://github.com/ckolivas/lrzip/issues/95
 CVE-2018-10684



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/3d8f269134f49ec2a1ee7e1b928f254947208a10

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/3d8f269134f49ec2a1ee7e1b928f254947208a10
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180517/ea209fb8/attachment.html>