[Git][security-tracker-team/security-tracker][master] CVE-2018-19105,librecad: All Debian versions are vulnerable

[Markus Koschany]

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1e5696a8 by Markus Koschany at 2019-05-05T14:56:31Z
CVE-2018-19105,librecad: All Debian versions are vulnerable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -32133,8 +32133,11 @@ CVE-2018-19107 (In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called fro
 CVE-2018-19106 (Avi Vantage before 17.2.13 uses an invalid URL encoding during a redir ...)
 	NOT-FOR-US: Avi Vantage
 CVE-2018-19105 (LibreCAD 2.1.3 allows remote attackers to cause a denial of service (0 ...)
-	- librecad <undetermined>
+	- librecad <unfixed>
 	NOTE: https://code610.blogspot.com/2018/11/crashing-librecad-213.html
+	NOTE: https://github.com/LibreCAD/LibreCAD/issues/1038
+	NOTE: Fixed by https://github.com/LibreCAD/LibreCAD/commit/6da7cc5f7f31afb008f03dbd11e07207ccd82085
+	NOTE: Regression fix https://github.com/LibreCAD/LibreCAD/commit/8604f171ee380f294102da6154adf77ab754d403
 CVE-2018-19104 (In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can b ...)
 	NOT-FOR-US: BageCMS
 CVE-2018-19103



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/1e5696a84c2fa4f5252ae6f5fc513426ee57aefc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/1e5696a84c2fa4f5252ae6f5fc513426ee57aefc
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190505/7d9f448d/attachment.html>