[Git][security-tracker-team/security-tracker][master] CVE-2019-7664: The vulnerable code is not in stretch
Adrian Bunk (@bunk)
bunk at debian.org
Sat Oct 30 19:51:26 BST 2021
Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker
Commits:
28ac6d90 by Adrian Bunk at 2021-10-30T21:50:44+03:00
CVE-2019-7664: The vulnerable code is not in stretch
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -175182,7 +175182,7 @@ CVE-2019-7665 (In elfutils 0.175, a heap-based buffer over-read was discovered i
NOTE: https://sourceware.org/git/?p=elfutils.git;a=commit;h=de01cc6f9446187d69b9748bb3636361c79e77a4
CVE-2019-7664 (In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_not ...)
- elfutils 0.176-1 (low; bug #921881)
- [stretch] - elfutils <no-dsa> (Minor issue)
+ [stretch] - elfutils <not-affected> (Vulnerable code introduced later)
[jessie] - elfutils <not-affected> (Vulnerable code introduced later)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=24084
NOTE: https://sourceware.org/git/?p=elfutils.git;a=commit;h=e65d91d21cb09d83b001fef9435e576ba447db32
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/28ac6d90fc5e6b95cb79eefaebf391fc06a7e0bf
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/28ac6d90fc5e6b95cb79eefaebf391fc06a7e0bf
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211030/0335927c/attachment.htm>
More information about the debian-security-tracker-commits
mailing list