[Git][security-tracker-team/security-tracker][master] Add new libredwg issues

Salvatore Bonaccorso carnil at debian.org
Fri Dec 27 08:39:52 GMT 2019



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ef3ee518 by Salvatore Bonaccorso at 2019-12-27T08:39:23Z
Add new libredwg issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -63,19 +63,19 @@ CVE-2019-20017 (A stack-based buffer over-read was discovered in Mat_VarReadNext
 CVE-2019-20016 (libmysofa 0.9 does not properly restrict recursive function calls, as  ...)
 	TODO: check
 CVE-2019-20015 (An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead  ...)
-	TODO: check
+	- libredwg <itp> (bug #595191)
 CVE-2019-20014 (An issue was discovered in GNU LibreDWG before 0.93. There is a double ...)
-	TODO: check
+	- libredwg <itp> (bug #595191)
 CVE-2019-20013 (An issue was discovered in GNU LibreDWG before 0.93. Crafted input wil ...)
-	TODO: check
+	- libredwg <itp> (bug #595191)
 CVE-2019-20012 (An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead  ...)
-	TODO: check
+	- libredwg <itp> (bug #595191)
 CVE-2019-20011 (An issue was discovered in GNU LibreDWG 0.92. There is a heap-based bu ...)
-	TODO: check
+	- libredwg <itp> (bug #595191)
 CVE-2019-20010 (An issue was discovered in GNU LibreDWG 0.92. There is a use-after-fre ...)
-	TODO: check
+	- libredwg <itp> (bug #595191)
 CVE-2019-20009 (An issue was discovered in GNU LibreDWG before 0.93. Crafted input wil ...)
-	TODO: check
+	- libredwg <itp> (bug #595191)
 CVE-2019-20008 (In Archery before 1.3, inserting an XSS payload into a project name (e ...)
 	TODO: check
 CVE-2019-20007 (An issue was discovered in ezXML 0.8.2 through 0.8.6. The function ezx ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ef3ee518829c160cb60ecefc108091fb60880e4c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ef3ee518829c160cb60ecefc108091fb60880e4c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191227/370ef524/attachment.html>


More information about the debian-security-tracker-commits mailing list