[Git][security-tracker-team/security-tracker][master] LTS/Annotate CVE-2018-17581/exiv2 as no-dsa (Minor issue) for jessie
Roberto C. Sánchez
roberto at debian.org
Sun Oct 21 00:21:27 BST 2018
Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker
Commits:
74b8d594 by Roberto C. Sánchez at 2018-10-20T23:20:53Z
LTS/Annotate CVE-2018-17581/exiv2 as no-dsa (Minor issue) for jessie
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2363,6 +2363,7 @@ CVE-2018-17582 (Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. T
CVE-2018-17581 (CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has ...)
- exiv2 <unfixed> (low; bug #910060)
[stretch] - exiv2 <no-dsa> (Minor issue)
+ [jessie] - exiv2 <no-dsa> (Minor issue)
NOTE: https://github.com/Exiv2/exiv2/issues/460
NOTE: Fixed in: https://github.com/Exiv2/exiv2/commit/b3d077dcaefb6747fff8204490f33eba5a144edb
CVE-2018-17580 (A heap-based buffer over-read exists in the function fast_edit_packet() ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/74b8d594e502a68b21592f1a596edca11ef60ea7
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/74b8d594e502a68b21592f1a596edca11ef60ea7
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181020/69e302ad/attachment.html>
More information about the debian-security-tracker-commits
mailing list