[Git][security-tracker-team/security-tracker][master] libgrokj2k fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
59755b9e by Moritz Muehlenhoff at 2022-07-12T10:55:52+02:00
libgrokj2k fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -39786,9 +39786,10 @@ CVE-2021-45937 (wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttCli
 CVE-2021-45936 (wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttDecode_Di ...)
 	NOT-FOR-US: wolfMQTT
 CVE-2021-45935 (Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K: ...)
-	- libgrokj2k <unfixed>
+	- libgrokj2k 9.7.5-1
 	NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39021
-	NOTE: Referenced fix isn't in the upstream repo
+	NOTE: Vague oss-fuzzer report and referenced fix isn't in the upstream repo
+	NOTE: Marking 9.7.5-1 as fixed based on identified patch date
 CVE-2021-45934 (wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_De ...)
 	NOT-FOR-US: wolfMQTT
 CVE-2021-45933 (wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (8 bytes) in Mqt ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/59755b9e52c6a35641a235ba6ad1d3176c186fc8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/59755b9e52c6a35641a235ba6ad1d3176c186fc8
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220712/84f2d3c2/attachment.htm>