[Git][security-tracker-team/security-tracker][master] 2 commits: Add fixed version for gnome-sushi CVE-2019-19308

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
749869ce by Jeremy Bicha at 2022-12-06T10:12:44-05:00
Add fixed version for gnome-sushi CVE-2019-19308

- - - - -
a4bd3b21 by Salvatore Bonaccorso at 2022-12-06T15:20:26+00:00
Merge branch 'sushi-2019-19308' into 'master'

Add fixed version for gnome-sushi CVE-2019-19308

See merge request security-tracker-team/security-tracker!119
- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -224164,9 +224164,10 @@ CVE-2019-19330 (The HTTP/2 implementation in HAProxy before 2.0.10 mishandles he
 	NOTE: https://git.haproxy.org/?p=haproxy.git;a=commit;h=146f53ae7e97dbfe496d0445c2802dd0a30b0878
 CVE-2019-19308 (In text_to_glyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0,  ...)
 	- gnome-font-viewer 3.34.0-2 (unimportant)
-	- gnome-sushi <unfixed> (unimportant)
+	- gnome-sushi 3.38.0-1 (unimportant)
 	NOTE: https://gitlab.gnome.org/GNOME/gnome-font-viewer/issues/17
 	NOTE: https://gitlab.gnome.org/GNOME/gnome-font-viewer/commit/9661683379806e2bad6a52ce6dde776a33f4f981
+	NOTE: https://gitlab.gnome.org/GNOME/sushi/-/commit/74e95963bd088b62f4f1de381c1e3ce45bbd5615
 	NOTE: Crash in GUI tool, no security impact
 CVE-2019-19307 (An integer overflow in parse_mqtt in mongoose.c in Cesanta Mongoose 6. ...)
 	NOT-FOR-US: Cesanta Mongoose



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5d4c2566e5ff7fbb12aa80730d49c7085ac77466...a4bd3b21e5f2f174f8c2a6dddee1cb5485de1f26

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5d4c2566e5ff7fbb12aa80730d49c7085ac77466...a4bd3b21e5f2f174f8c2a6dddee1cb5485de1f26
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221206/e83bc40f/attachment.htm>