[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2022-2652/v4l2loopback already fixed in sid

[Neil Williams (@codehelp)]

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9d9f9912 by Neil Williams at 2022-08-05T09:34:05+01:00
CVE-2022-2652/v4l2loopback already fixed in sid

- - - - -
6ad6fb6d by Neil Williams at 2022-08-05T09:48:05+01:00
CVE-2022-2652 v4l2loopback unfixed in 0.12.7-1 bug 1016685

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -121,7 +121,9 @@ CVE-2022-2654
 CVE-2022-2653 (With this vulnerability an attacker can read many sensitive files like ...)
 	TODO: check
 CVE-2022-2652 (Depending on the way the format strings in the card label are crafted  ...)
-	TODO: check
+	- v4l2loopback <unfixed> (bug #1016685)
+	NOTE: https://huntr.dev/bounties/1b055da5-7a9e-4409-99d7-030280d242d5
+	NOTE: https://github.com/umlaeute/v4l2loopback/commit/e4cd225557486c420f6a34411f98c575effd43dd
 CVE-2022-2651 (Authentication Bypass by Primary Weakness in GitHub repository bookwyr ...)
 	NOT-FOR-US: BookWyrm
 CVE-2022-2650



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/524fe19f5aeb939c32bb175749964be2666e8797...6ad6fb6d8675926da7861d0120b5462c312b16ce

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/524fe19f5aeb939c32bb175749964be2666e8797...6ad6fb6d8675926da7861d0120b5462c312b16ce
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220805/f2ab6f43/attachment.htm>