[Git][security-tracker-team/security-tracker][master] CVE-2018-17233/hdf5: add bug entry and commit

[Hugo Lefeuvre]

Hugo Lefeuvre pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8710fcf8 by Hugo Lefeuvre at 2019-04-09T09:19:08Z
CVE-2018-17233/hdf5: add bug entry and commit

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -34840,6 +34840,9 @@ CVE-2018-17233 (A SIGFPE signal is raised in the function H5D__create_chunk_file
 	[experimental] - hdf5 1.10.5+repack-1~exp1
 	- hdf5 <unfixed>
 	NOTE: https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln2#divided-by-zero---h5d__create_chunk_file_map_hyper_div_zero
+	NOTE: https://jira.hdfgroup.org/browse/HDFFV-10577
+	NOTE: fixed in 1.10.5, release notes: https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
+	NOTE: https://bitbucket.hdfgroup.org/projects/HDFFV/repos/hdf5/commits/f891c38c6e724e9032a534512618b9650be76377
 CVE-2018-17232 (SQL injection vulnerability in archivebot.py in docmarionum1 Slack Arc ...)
 	NOT-FOR-US: docmarionum1 Slack ArchiveBot (slack-archive-bot)
 CVE-2018-17231 (** DISPUTED ** Telegram Desktop (aka tdesktop) 1.3.14 might allow atta ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8710fcf89137b5d34de968d95feb7a12e54b9663

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8710fcf89137b5d34de968d95feb7a12e54b9663
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190409/bdd920ef/attachment.html>