[Git][security-tracker-team/security-tracker][master] Add CVE-2020-1530{4,5,6}/openexr

Salvatore Bonaccorso carnil at debian.org
Fri Jun 26 09:30:36 BST 2020



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8f737091 by Salvatore Bonaccorso at 2020-06-26T10:28:53+02:00
Add CVE-2020-1530{4,5,6}/openexr

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,9 +1,12 @@
 CVE-2020-15306 (An issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount a ...)
-	TODO: check
+	- openexr <unfixed>
+	NOTE: https://github.com/AcademySoftwareFoundation/openexr/pull/738
 CVE-2020-15305 (An issue was discovered in OpenEXR before 2.5.2. Invalid input could c ...)
-	TODO: check
+	- openexr <unfixed>
+	NOTE: https://github.com/AcademySoftwareFoundation/openexr/pull/730
 CVE-2020-15304 (An issue was discovered in OpenEXR before 2.5.2. An invalid tiled inpu ...)
-	TODO: check
+	- openexr <unfixed>
+	NOTE: https://github.com/AcademySoftwareFoundation/openexr/pull/727
 CVE-2020-15303
 	RESERVED
 CVE-2020-15302 (In Argent RecoveryManager before 0xdc350d09f71c48c5D22fBE2741e4d6A0397 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f73709135dfe4a2b456ff9d9855839ed5ece4cb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f73709135dfe4a2b456ff9d9855839ed5ece4cb
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200626/e82a7d32/attachment.html>


More information about the debian-security-tracker-commits mailing list