[Git][security-tracker-team/security-tracker][master] Add CVE-2019-19308/gnome-font-viewer

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6f58089f by Salvatore Bonaccorso at 2019-11-27T20:34:01Z
Add CVE-2019-19308/gnome-font-viewer

Details need to be checked.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -265,7 +265,10 @@ CVE-2019-19330 (The HTTP/2 implementation in HAProxy before 2.0.10 mishandles he
 	NOTE: https://git.haproxy.org/?p=haproxy.git;a=commit;h=54f53ef7ce4102be596130b44c768d1818570344
 	NOTE: https://git.haproxy.org/?p=haproxy.git;a=commit;h=146f53ae7e97dbfe496d0445c2802dd0a30b0878
 CVE-2019-19308 (In text_to_glyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0,  ...)
-	TODO: check
+	- gnome-font-viewer <unfixed>
+	- gnome-sushi <unfixed>
+	NOTE: https://gitlab.gnome.org/GNOME/gnome-font-viewer/issues/17
+	TODO: check details
 CVE-2019-19307 (An integer overflow in parse_mqtt in mongoose.c in Cesanta Mongoose 6. ...)
 	NOT-FOR-US: Cesanta Mongoose
 	NOTE: smplayer embeds a copy, which is unused in any released version and disabled since 18.5.0~ds1-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6f58089ff27b9ee8d0cb7d5976dbef720e19ba7b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6f58089ff27b9ee8d0cb7d5976dbef720e19ba7b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191127/df131369/attachment.html>