[Git][security-tracker-team/security-tracker][master] LTS/Annotate CVE-2018-17581/exiv2 as no-dsa (Minor issue) for jessie

Roberto C. Sánchez roberto at debian.org
Sun Oct 21 00:21:27 BST 2018


Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker


Commits:
74b8d594 by Roberto C. Sánchez at 2018-10-20T23:20:53Z
LTS/Annotate CVE-2018-17581/exiv2 as no-dsa (Minor issue) for jessie

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2363,6 +2363,7 @@ CVE-2018-17582 (Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. T
 CVE-2018-17581 (CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has ...)
 	- exiv2 <unfixed> (low; bug #910060)
 	[stretch] - exiv2 <no-dsa> (Minor issue)
+	[jessie] - exiv2 <no-dsa> (Minor issue)
 	NOTE: https://github.com/Exiv2/exiv2/issues/460
 	NOTE: Fixed in: https://github.com/Exiv2/exiv2/commit/b3d077dcaefb6747fff8204490f33eba5a144edb
 CVE-2018-17580 (A heap-based buffer over-read exists in the function fast_edit_packet() ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/74b8d594e502a68b21592f1a596edca11ef60ea7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/74b8d594e502a68b21592f1a596edca11ef60ea7
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181020/69e302ad/attachment.html>


More information about the debian-security-tracker-commits mailing list