[Git][security-tracker-team/security-tracker][master] CVE-2018-{21010,20847,5727}/openjpeg2 fixed in sid

[Hugo Lefeuvre]

Hugo Lefeuvre pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e388cd94 by Hugo Lefeuvre at 2019-10-08T12:24:35Z
CVE-2018-{21010,20847,5727}/openjpeg2 fixed in sid

via 2.3.1-1.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3599,7 +3599,7 @@ CVE-2019-15925 (An issue was discovered in the Linux kernel before 5.2.3. An out
 	[jessie] - linux <not-affected> (Vulnerable code introduced later)
 	NOTE: https://git.kernel.org/linus/04f25edb48c441fc278ecc154c270f16966cbb90
 CVE-2018-21010 (OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_pr ...)
-	- openjpeg2 <unfixed> (bug #939553)
+	- openjpeg2 2.3.1-1 (bug #939553)
 	[buster] - openjpeg2 <no-dsa> (Minor issue)
 	[stretch] - openjpeg2 <no-dsa> (Minor issue)
 	NOTE: https://github.com/uclouvain/openjpeg/commit/2e5ab1d9987831c981ff05862e8ccf1381ed58ea
@@ -13449,7 +13449,7 @@ CVE-2019-12966 (FeHelper through 2019-06-19 allows arbitrary code execution duri
 	NOT-FOR-US: FeHelper
 CVE-2018-20847 (An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the functi ...)
 	{DLA-1851-1}
-	- openjpeg2 <unfixed> (low; bug #931294)
+	- openjpeg2 2.3.1-1 (low; bug #931294)
 	[buster] - openjpeg2 <no-dsa> (Minor issue)
 	[stretch] - openjpeg2 <no-dsa> (Minor issue)
 	NOTE: https://github.com/uclouvain/openjpeg/commit/5d00b719f4b93b1445e6fb4c766b9a9883c57949
@@ -87301,7 +87301,7 @@ CVE-2018-5729 (MIT krb5 1.6 or later allows an authenticated kadmin with permiss
 CVE-2018-5728 (Cobham Sea Tel 121 build 222701 devices allow remote attackers to obta ...)
 	NOT-FOR-US: Cobham Sea Tel 121 build 222701 devices
 CVE-2018-5727 (In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the o ...)
-	- openjpeg2 <unfixed> (unimportant; bug #888532)
+	- openjpeg2 2.3.1-1 (unimportant; bug #888532)
 	NOTE: https://github.com/uclouvain/openjpeg/issues/1053
 	NOTE: https://github.com/rouault/openjpeg/commit/a1d32a596a94280178c44a55d7e
 	NOTE: ubsan error (integer overflow), no security impact per se and unlikely



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e388cd944d34bb7404f63561b5d6108f5fb115ab

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e388cd944d34bb7404f63561b5d6108f5fb115ab
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191008/1e6a0d5d/attachment.html>