[Git][security-tracker-team/security-tracker][master] Add CVE-2019-1879{7,8,9}/libsass

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e130c0ce by Salvatore Bonaccorso at 2019-11-06T20:17:33Z
Add CVE-2019-1879{7,8,9}/libsass

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,11 +1,14 @@
 CVE-2019-18800 (Viber through 11.7.0.5 allows a remote attacker who can capture a vict ...)
 	TODO: check
 CVE-2019-18799 (LibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser ...)
-	TODO: check
+	- libsass <unfixed>
+	NOTE: https://github.com/sass/libsass/issues/3001
 CVE-2019-18798 (LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::wea ...)
-	TODO: check
+	- libsass <unfixed>
+	NOTE: https://github.com/sass/libsass/issues/2999
 CVE-2019-18797 (LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operator()(Sas ...)
-	TODO: check
+	- libsass <unfixed>
+	NOTE: https://github.com/sass/libsass/issues/3000
 CVE-2019-18796
 	RESERVED
 CVE-2019-18795



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e130c0ce3842f709abd8c5ad95f8369525cd81fd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e130c0ce3842f709abd8c5ad95f8369525cd81fd
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191106/7a1b296a/attachment-0001.html>