[Git][security-tracker-team/security-tracker][master] Update status for CVE-2021-36081/tesseract

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Jan 5 13:56:49 GMT 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2041dd5f by Salvatore Bonaccorso at 2023-01-05T14:56:21+01:00
Update status for CVE-2021-36081/tesseract

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -111252,13 +111252,13 @@ CVE-2021-36082 (ntop nDPI 3.4 has a stack-based buffer overflow in processClient
 	NOTE: https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ndpi/OSV-2021-304.yaml
 	NOTE: https://github.com/ntop/nDPI/commit/1ec621c85b9411cc611652fd57a892cfef478af3
 CVE-2021-36081 (Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-fr ...)
-	- tesseract <unfixed> (bug #990529)
+	- tesseract 5.1.0-1 (bug #990529)
 	[bullseye] - tesseract <no-dsa> (Minor issue)
 	[buster] - tesseract <no-dsa> (Minor issue)
 	[stretch] - tesseract <no-dsa> (Minor issue)
 	NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29698
 	NOTE: https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tesseract-ocr/OSV-2021-211.yaml
-	NOTE: https://github.com/tesseract-ocr/tesseract/commit/e6f15621c2ab2ecbfabf656942d8ef66f03b2d55
+	NOTE: https://github.com/tesseract-ocr/tesseract/commit/e6f15621c2ab2ecbfabf656942d8ef66f03b2d55 (5.0.0-alpha-20210401)
 CVE-2021-36080 (GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_ ...)
 	- libredwg <itp> (bug #595191)
 CVE-2020-36407 (libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataF ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2041dd5fb3c9bf8088c2eb7b470eb2add0fecffb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2041dd5fb3c9bf8088c2eb7b470eb2add0fecffb
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230105/f7159b1a/attachment.htm>


More information about the debian-security-tracker-commits mailing list