[Git][security-tracker-team/security-tracker][master] Add CVE-2022-153{3,4}/libmobi

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1145446d by Salvatore Bonaccorso at 2022-04-29T23:29:10+02:00
Add CVE-2022-153{3,4}/libmobi

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -79,9 +79,13 @@ CVE-2022-1536 (A vulnerability has been found in automad up to 1.10.9 and classi
 CVE-2022-1535
 	RESERVED
 CVE-2022-1534 (Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszews ...)
-	TODO: check
+	- libmobi <unfixed>
+	NOTE: https://huntr.dev/bounties/9a90ffa1-38f5-4685-9c00-68ba9068ce3d
+	NOTE: https://github.com/bfabiszewski/libmobi/commit/fb1ab50e448ddbed746fd27ae07469bc506d838b
 CVE-2022-1533 (Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0. ...)
-	TODO: check
+	- libmobi <unfixed>
+	NOTE: https://huntr.dev/bounties/cb574ce1-fbf7-42ea-9e6a-91e17adecdc3
+	NOTE: https://github.com/bfabiszewski/libmobi/commit/eafc415bc6067e72577f70d6dd5acbf057ce6e6f
 CVE-2022-1532
 	RESERVED
 CVE-2022-1531 (SQL injection vulnerability in ARAX-UI Synonym Lookup functionality in ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1145446d062567abcd1391f5b3aa3093a3cbbb99

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1145446d062567abcd1391f5b3aa3093a3cbbb99
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220429/fd47aa7b/attachment.htm>