[Git][security-tracker-team/security-tracker][master] Add CVE-2019-20016/libmysofa

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4a18af03 by Salvatore Bonaccorso at 2019-12-27T08:44:06Z
Add CVE-2019-20016/libmysofa

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -65,7 +65,10 @@ CVE-2019-20017 (A stack-based buffer over-read was discovered in Mat_VarReadNext
 	- libmatio <unfixed>
 	NOTE: https://github.com/tbeu/matio/issues/127
 CVE-2019-20016 (libmysofa 0.9 does not properly restrict recursive function calls, as  ...)
-	TODO: check
+	- libmysofa <unfixed>
+	NOTE: https://github.com/hoene/libmysofa/commit/2e6fac6ab6156dae8e8c6f417741388084b70d6f
+	NOTE: https://github.com/hoene/libmysofa/issues/83
+	NOTE: https://github.com/hoene/libmysofa/issues/84
 CVE-2019-20015 (An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead  ...)
 	- libredwg <itp> (bug #595191)
 CVE-2019-20014 (An issue was discovered in GNU LibreDWG before 0.93. There is a double ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4a18af03b011b5e1791ee8929352368eb9024942

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4a18af03b011b5e1791ee8929352368eb9024942
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191227/aafbd765/attachment-0001.html>