[Git][security-tracker-team/security-tracker][master] Add CVE-2020-27818/pngcheck

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
09415fa5 by Salvatore Bonaccorso at 2020-12-03T07:35:51+01:00
Add CVE-2020-27818/pngcheck

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6439,6 +6439,9 @@ CVE-2020-27819 [NULL pointer dereference via crafted xls file]
 	NOTE: https://github.com/libxls/libxls/issues/84
 CVE-2020-27818
 	RESERVED
+	- pngcheck <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1902011
+	NOTE: Patch applied in Fedora: https://src.fedoraproject.org/rpms/pngcheck/blob/cc48791e34201caf7b686084b735d06cef66c974/f/pngcheck-2.4.0-overflow-bz1897485.patch
 CVE-2020-27817
 	RESERVED
 CVE-2020-27816 (The elasticsearch-operator does not validate the namespace where kiban ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/09415fa5d540dac9c9bda2547fc0270e2849031f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/09415fa5d540dac9c9bda2547fc0270e2849031f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201203/09022850/attachment.html>