[Git][security-tracker-team/security-tracker][master] Ad CVE-2018-878{4,5,6,7,8,9}/freerdp issues

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
31bdb949 by Salvatore Bonaccorso at 2018-11-30T22:20:13Z
Ad CVE-2018-878{4,5,6,7,8,9}/freerdp issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -31214,17 +31214,29 @@ CVE-2018-8791
 CVE-2018-8790
 	RESERVED
 CVE-2018-8789 (FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds ...)
-	TODO: check
+	- freerdp2 2.0.0~git20181120.1.e21b72c95+dfsg1-1
+	- freerdp <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/commit/2ee663f39dc8dac3d9988e847db19b2d7e3ac8c6
 CVE-2018-8788 (FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of ...)
-	TODO: check
+	- freerdp2 2.0.0~git20181120.1.e21b72c95+dfsg1-1
+	- freerdp <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/commit/d1112c279bd1a327e8e4d0b5f371458bf2579659
 CVE-2018-8787 (FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that ...)
-	TODO: check
+	- freerdp2 2.0.0~git20181120.1.e21b72c95+dfsg1-1
+	- freerdp <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/commit/09b9d4f1994a674c4ec85b4947aa656eda1aed8a
 CVE-2018-8786 (FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that ...)
-	TODO: check
+	- freerdp2 2.0.0~git20181120.1.e21b72c95+dfsg1-1
+	- freerdp <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/commit/445a5a42c500ceb80f8fa7f2c11f3682538033f3
 CVE-2018-8785 (FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer ...)
-	TODO: check
+	- freerdp2 2.0.0~git20181120.1.e21b72c95+dfsg1-1
+	- freerdp <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/commit/602f4a2e14b41703b5f431de3154cd46a5750a2d
 CVE-2018-8784 (FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer ...)
-	TODO: check
+	- freerdp2 2.0.0~git20181120.1.e21b72c95+dfsg1-1
+	- freerdp <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/commit/17c363a5162fd4dc77b1df54e48d7bd9bf6b3be7
 CVE-2018-8783
 	RESERVED
 CVE-2018-8782



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/31bdb9491af2a1b2df7d41b2ee444a880fe63cca

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/31bdb9491af2a1b2df7d41b2ee444a880fe63cca
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181130/eb6a3e9b/attachment.html>