[Git][security-tracker-team/security-tracker][master] two htmldoc non issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ec8bda45 by Moritz Muehlenhoff at 2022-07-20T16:09:57+02:00
two htmldoc non issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5740,11 +5740,16 @@ CVE-2022-34037
 CVE-2022-34036
 	RESERVED
 CVE-2022-34035 (HTMLDoc v1.9.12 and below was discovered to contain a heap overflow vi ...)
-	TODO: check
+	- htmldoc <unfixed> (unimportant)
+	NOTE: https://github.com/michaelrsweet/htmldoc/issues/426
+	NOTE: https://github.com/michaelrsweet/htmldoc/commit/ee778252faebb721afba5a081dd6ad7eaf20eef3
+	NOTE: Crash in CLI tool, no security impact
 CVE-2022-34034
 	RESERVED
 CVE-2022-34033 (HTMLDoc v1.9.15 was discovered to contain a heap overflow via (write_h ...)
-	TODO: check
+	- htmldoc <unfixed> (unimportant)
+	NOTE: https://github.com/michaelrsweet/htmldoc/issues/425
+	NOTE: https://github.com/michaelrsweet/htmldoc/commit/a0014be47d614220db111b360fb6170ef6f3937e
 CVE-2022-34032 (Nginx NJS v0.7.5 was discovered to contain a segmentation violation in ...)
 	NOT-FOR-US: njs
 CVE-2022-34031 (Nginx NJS v0.7.5 was discovered to contain a segmentation violation vi ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ec8bda45466e45b56af1979d21822ae543842368

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ec8bda45466e45b56af1979d21822ae543842368
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220720/78b73f7b/attachment-0001.htm>