[Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-13568/cimg

Salvatore Bonaccorso carnil at debian.org
Mon Mar 2 14:27:25 GMT 2020



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fc26bbc4 by Salvatore Bonaccorso at 2020-03-02T15:26:50+01:00
Add fixed version for CVE-2019-13568/cimg

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -40929,7 +40929,7 @@ CVE-2019-13570 (The AJdG AdRotate plugin before 5.3 for WordPress allows SQL Inj
 CVE-2019-13569 (A SQL injection vulnerability exists in the Icegram Email Subscribers  ...)
 	NOT-FOR-US: Icegram Email Subscribers & Newsletters plugin for WordPress
 CVE-2019-13568 (CImg through 2.6.7 has a heap-based buffer overflow in _load_bmp in CI ...)
-	- cimg <unfixed> (bug #940952)
+	- cimg 2.8.4+dfsg-1 (bug #940952)
 	[buster] - cimg <no-dsa> (Minor issue)
 	[stretch] - cimg <no-dsa> (Minor issue)
 	[jessie] - cimg <not-affected> (Vulnerable code added later)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc26bbc4216a43daf320ac3374f2f4a48816f50b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc26bbc4216a43daf320ac3374f2f4a48816f50b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200302/8b9c697e/attachment.html>


More information about the debian-security-tracker-commits mailing list