[Git][security-tracker-team/security-tracker][master] Update information for CVE-2018-12688/tinyexr

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
08d4fe03 by Salvatore Bonaccorso at 2021-07-31T20:47:26+02:00
Update information for CVE-2018-12688/tinyexr

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -198804,7 +198804,8 @@ CVE-2018-12689 (phpLDAPadmin 1.2.2 allows LDAP injection via a crafted server_id
 	NOTE: Non-security issue as demostrated in https://bugs.debian.org/902186
 	NOTE: and disputed as security issue. Should be properly rejected by MITRE.
 CVE-2018-12688 (tinyexr 0.9.5 has a segmentation fault in the wav2Decode function. ...)
-	NOT-FOR-US: tinyexr
+	- tinyexr <undetermined>
+	NOTE: https://github.com/syoyo/tinyexr/issues/83
 CVE-2018-12687 (tinyexr 0.9.5 has an assertion failure in DecodePixelData in tinyexr.h ...)
 	- tinyexr <undetermined>
 	NOTE: https://github.com/syoyo/tinyexr/issues/84



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/08d4fe03e790b5c90771ba6ac489d37882b8f1c5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/08d4fe03e790b5c90771ba6ac489d37882b8f1c5
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210731/dab0e3cb/attachment-0001.htm>