[Git][security-tracker-team/security-tracker][master] CVE-2021-2827{5-8}/jhead 3.06.0.1-2

[Neil Williams (@codehelp)]

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker


Commits:
27f7f748 by Neil Williams at 2022-03-24T11:00:24+00:00
CVE-2021-2827{5-8}/jhead 3.06.0.1-2

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -66893,13 +66893,20 @@ CVE-2021-28280 (CSRF + Cross-site scripting (XSS) vulnerability in search.php in
 CVE-2021-28279
 	RESERVED
 CVE-2021-28278 (A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3. ...)
-	TODO: check
+	- jhead 1:3.06.0.1-2
+	NOTE: https://github.com/Matthias-Wandel/jhead/commit/a50953a266583981b51a181c2fce73dad2ac5d7d (3.06.0.1)
+	NOTE: https://github.com/Matthias-Wandel/jhead/issues/15
 CVE-2021-28277 (A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and 3.0 ...)
-	TODO: check
+	- jhead 1:3.06.0.1-2
+	NOTE: https://github.com/Matthias-Wandel/jhead/commit/b8d78e5ec982e86cdd70ebfc1ebbb2273c982eea (3.06.0.1)
+	NOTE: https://github.com/Matthias-Wandel/jhead/issues/16
 CVE-2021-28276 (A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a  ...)
-	TODO: check
+	TODO: check CVE reference, probably invalid report or old version.
+	NOTE: https://github.com/Matthias-Wandel/jhead/issues/26
 CVE-2021-28275 (A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to ...)
-	TODO: check
+	- jhead 1:3.06.0.1-2
+	NOTE: https://github.com/Matthias-Wandel/jhead/commit/a50953a266583981b51a181c2fce73dad2ac5d7d (3.06.0.1)
+	NOTE: https://github.com/Matthias-Wandel/jhead/issues/17
 CVE-2021-28274
 	RESERVED
 CVE-2021-28273



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27f7f7482acfdc8c0d22a9aec586c486f144c527

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27f7f7482acfdc8c0d22a9aec586c486f144c527
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220324/a527e9b8/attachment-0001.htm>