[Git][security-tracker-team/security-tracker][master] Adjust version for opencv entered unstable
Salvatore Bonaccorso
carnil at debian.org
Tue Feb 12 15:28:00 GMT 2019
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
375f0676 by Salvatore Bonaccorso at 2019-02-12T15:27:11Z
Adjust version for opencv entered unstable
The version which entered unstable containing the fixes was 3.2.0+dfsg-6
which was based on rebuild of the 3.2.0+dfsg-5ubuntu1 version from
Ubuntu.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -58718,14 +58718,14 @@ CVE-2018-5270 (** DISPUTED ** In Malwarebytes Premium 3.3.1.2183, the driver fil
CVE-2018-5269 (In OpenCV 3.3.1, an assertion failure happens in ...)
{DLA-1438-1 DLA-1354-1}
[experimental] - opencv 3.4.4+dfsg-1~exp1
- - opencv 3.2.0+dfsg-5ubuntu1 (bug #886675)
+ - opencv 3.2.0+dfsg-6 (bug #886675)
[stretch] - opencv <ignored> (Minor issue)
NOTE: https://github.com/opencv/opencv/issues/10540
NOTE: 2.4 backport: https://patch-diff.githubusercontent.com/raw/opencv/opencv/pull/10901.patch
CVE-2018-5268 (In OpenCV 3.3.1, a heap-based buffer overflow happens in ...)
{DLA-1438-1 DLA-1354-1}
[experimental] - opencv 3.4.4+dfsg-1~exp1
- - opencv 3.2.0+dfsg-5ubuntu1 (bug #886674)
+ - opencv 3.2.0+dfsg-6 (bug #886674)
[stretch] - opencv <no-dsa> (Minor issue)
NOTE: https://github.com/opencv/opencv/issues/10541
NOTE: 2.4 backport: https://patch-diff.githubusercontent.com/raw/opencv/opencv/pull/10901.patch
@@ -62416,7 +62416,7 @@ CVE-2017-1000451 (fs-git is a file system like api for git repository. The fs-gi
CVE-2017-1000450 (In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and ...)
{DLA-1438-1 DLA-1235-1}
[experimental] - opencv 3.4.4+dfsg-1~exp1
- - opencv 3.2.0+dfsg-5ubuntu1 (bug #886282)
+ - opencv 3.2.0+dfsg-6 (bug #886282)
[stretch] - opencv <no-dsa> (Minor issue)
NOTE: https://github.com/opencv/opencv/issues/9723
NOTE: https://github.com/blendin/pocs/blob/master/opencv/0.OOB_Write_FillUniColor
@@ -63938,7 +63938,7 @@ CVE-2017-17787 (In GIMP 2.8.22, there is a heap-based buffer over-read in ...)
CVE-2017-17760 (OpenCV 3.3.1 has a Buffer Overflow in the cv::PxMDecoder::readData ...)
{DLA-1438-1 DLA-1235-1}
[experimental] - opencv 3.4.4+dfsg-1~exp1
- - opencv 3.2.0+dfsg-5ubuntu1 (bug #885843)
+ - opencv 3.2.0+dfsg-6 (bug #885843)
[stretch] - opencv <no-dsa> (Minor issue)
NOTE: https://github.com/opencv/opencv/issues/10351
NOTE: https://github.com/opencv/opencv/pull/10369/commits/7bbe1a53cfc097b82b1589f7915a2120de39274c
@@ -87153,19 +87153,19 @@ CVE-2017-12865 (Stack-based buffer overflow in "dnsproxy.c" in connman
CVE-2017-12864 (In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did ...)
{DLA-1438-1 DLA-1117-1}
[experimental] - opencv 3.4.4+dfsg-1~exp1
- - opencv 3.2.0+dfsg-5ubuntu1 (bug #875345)
+ - opencv 3.2.0+dfsg-6 (bug #875345)
[stretch] - opencv <no-dsa> (Minor issue)
NOTE: https://github.com/opencv/opencv/issues/9372
CVE-2017-12863 (In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ...)
{DLA-1438-1 DLA-1117-1}
[experimental] - opencv 3.4.4+dfsg-1~exp1
- - opencv 3.2.0+dfsg-5ubuntu1 (bug #875344)
+ - opencv 3.2.0+dfsg-6 (bug #875344)
[stretch] - opencv <no-dsa> (Minor issue)
NOTE: https://github.com/opencv/opencv/issues/9371
CVE-2017-12862 (In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer ...)
{DLA-1438-1 DLA-1117-1}
[experimental] - opencv 3.4.4+dfsg-1~exp1
- - opencv 3.2.0+dfsg-5ubuntu1 (bug #875342)
+ - opencv 3.2.0+dfsg-6 (bug #875342)
[stretch] - opencv <no-dsa> (Minor issue)
NOTE: https://github.com/opencv/opencv/issues/9370
CVE-2017-12861 (The Epson "EasyMP" software is designed to remotely stream a users ...)
@@ -87978,30 +87978,30 @@ CVE-2016-10404 (XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted red
CVE-2017-12606 (OpenCV (Open Source Computer Vision Library) through 3.3 has an ...)
{DLA-1438-1 DLA-1117-1}
[experimental] - opencv 3.4.4+dfsg-1~exp1
- - opencv 3.2.0+dfsg-5ubuntu1 (bug #872044)
+ - opencv 3.2.0+dfsg-6 (bug #872044)
[stretch] - opencv <no-dsa> (Minor issue)
NOTE: https://github.com/opencv/opencv/issues/9309
CVE-2017-12605 (OpenCV (Open Source Computer Vision Library) through 3.3 has an ...)
{DLA-1438-1 DLA-1117-1}
[experimental] - opencv 3.4.4+dfsg-1~exp1
- - opencv 3.2.0+dfsg-5ubuntu1 (bug #872044)
+ - opencv 3.2.0+dfsg-6 (bug #872044)
[stretch] - opencv <no-dsa> (Minor issue)
NOTE: https://github.com/opencv/opencv/issues/9309
CVE-2017-12604 (OpenCV (Open Source Computer Vision Library) through 3.3 has an ...)
{DLA-1438-1 DLA-1117-1}
[experimental] - opencv 3.4.4+dfsg-1~exp1
- - opencv 3.2.0+dfsg-5ubuntu1 (bug #872044)
+ - opencv 3.2.0+dfsg-6 (bug #872044)
[stretch] - opencv <no-dsa> (Minor issue)
NOTE: https://github.com/opencv/opencv/issues/9309
CVE-2017-12603 (OpenCV (Open Source Computer Vision Library) through 3.3 has an invalid ...)
{DLA-1438-1 DLA-1117-1}
[experimental] - opencv 3.4.4+dfsg-1~exp1
- - opencv 3.2.0+dfsg-5ubuntu1 (bug #872044)
+ - opencv 3.2.0+dfsg-6 (bug #872044)
[stretch] - opencv <no-dsa> (Minor issue)
NOTE: https://github.com/opencv/opencv/issues/9309
CVE-2017-12602 (OpenCV (Open Source Computer Vision Library) through 3.3 has a denial ...)
[experimental] - opencv 3.4.4+dfsg-1~exp1
- - opencv 3.2.0+dfsg-5ubuntu1 (bug #872045)
+ - opencv 3.2.0+dfsg-6 (bug #872045)
[stretch] - opencv <ignored> (Minor issue)
[jessie] - opencv <ignored> (Minor issue)
[wheezy] - opencv <ignored> (Minor issue)
@@ -88009,12 +88009,12 @@ CVE-2017-12602 (OpenCV (Open Source Computer Vision Library) through 3.3 has a d
CVE-2017-12601 (OpenCV (Open Source Computer Vision Library) through 3.3 has a buffer ...)
{DLA-1438-1 DLA-1117-1}
[experimental] - opencv 3.4.4+dfsg-1~exp1
- - opencv 3.2.0+dfsg-5ubuntu1 (bug #872044)
+ - opencv 3.2.0+dfsg-6 (bug #872044)
[stretch] - opencv <no-dsa> (Minor issue)
NOTE: https://github.com/opencv/opencv/issues/9309
CVE-2017-12600 (OpenCV (Open Source Computer Vision Library) through 3.3 has a denial ...)
[experimental] - opencv 3.4.4+dfsg-1~exp1
- - opencv 3.2.0+dfsg-5ubuntu1 (bug #872045)
+ - opencv 3.2.0+dfsg-6 (bug #872045)
[stretch] - opencv <ignored> (Minor issue)
[jessie] - opencv <ignored> (Minor issue)
[wheezy] - opencv <ignored> (Minor issue)
@@ -88022,19 +88022,19 @@ CVE-2017-12600 (OpenCV (Open Source Computer Vision Library) through 3.3 has a d
CVE-2017-12599 (OpenCV (Open Source Computer Vision Library) through 3.3 has an ...)
{DLA-1438-1 DLA-1117-1}
[experimental] - opencv 3.4.4+dfsg-1~exp1
- - opencv 3.2.0+dfsg-5ubuntu1 (bug #872044)
+ - opencv 3.2.0+dfsg-6 (bug #872044)
[stretch] - opencv <no-dsa> (Minor issue)
NOTE: https://github.com/opencv/opencv/issues/9309
CVE-2017-12598 (OpenCV (Open Source Computer Vision Library) through 3.3 has an ...)
{DLA-1438-1 DLA-1117-1}
[experimental] - opencv 3.4.4+dfsg-1~exp1
- - opencv 3.2.0+dfsg-5ubuntu1 (bug #872044)
+ - opencv 3.2.0+dfsg-6 (bug #872044)
[stretch] - opencv <no-dsa> (Minor issue)
NOTE: https://github.com/opencv/opencv/issues/9309
CVE-2017-12597 (OpenCV (Open Source Computer Vision Library) through 3.3 has an ...)
{DLA-1438-1 DLA-1117-1}
[experimental] - opencv 3.4.4+dfsg-1~exp1
- - opencv 3.2.0+dfsg-5ubuntu1 (bug #872044)
+ - opencv 3.2.0+dfsg-6 (bug #872044)
[stretch] - opencv <no-dsa> (Minor issue)
NOTE: https://github.com/opencv/opencv/issues/9309
CVE-2017-12596 (In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read ...)
@@ -151280,7 +151280,7 @@ CVE-2016-1518 (The auto-provisioning mechanism in the Grandstream Wave app 1.0.1
NOT-FOR-US: Grandstream Wave app
CVE-2016-1517 (OpenCV 3.0.0 allows remote attackers to cause a denial of service ...)
[experimental] - opencv 3.4.4+dfsg-1~exp1
- - opencv 3.2.0+dfsg-5ubuntu1 (bug #872043)
+ - opencv 3.2.0+dfsg-6 (bug #872043)
[stretch] - opencv <ignored> (Minor issue)
[jessie] - opencv <no-dsa> (Minor issue)
[wheezy] - opencv <no-dsa> (Minor issue)
@@ -151289,7 +151289,7 @@ CVE-2016-1517 (OpenCV 3.0.0 allows remote attackers to cause a denial of service
CVE-2016-1516 (OpenCV 3.0.0 has a double free issue that allows attackers to execute ...)
{DLA-1438-1 DLA-1117-1}
[experimental] - opencv 3.4.4+dfsg-1~exp1
- - opencv 3.2.0+dfsg-5ubuntu1 (bug #872043)
+ - opencv 3.2.0+dfsg-6 (bug #872043)
[stretch] - opencv <no-dsa> (Minor issue)
NOTE: https://arxiv.org/pdf/1701.04739.pdf
NOTE: https://github.com/opencv/opencv/issues/5956
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/375f0676c21634c3f05232a9c9e2dab650502d69
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/375f0676c21634c3f05232a9c9e2dab650502d69
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190212/d5e41af4/attachment-0001.html>
More information about the debian-security-tracker-commits
mailing list