[Git][security-tracker-team/security-tracker][master] libxpm fixed in sid
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Thu Oct 5 15:32:58 BST 2023
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
b05bd7b8 by Moritz Muehlenhoff at 2023-10-05T16:32:27+02:00
libxpm fixed in sid
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -386,11 +386,11 @@ CVE-2023-4911 (A buffer overflow was discovered in the GNU C Library's dynamic l
NOTE: Fixed by: https://sourceware.org/git/?p=glibc.git;a=commit;h=1056e5b4c3f2d90ed2b4a55f96add28da2f4c8fa
NOTE: https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt
CVE-2023-43789 [libXpm: out of bounds read on XPM with corrupted colormap]
- - libxpm <unfixed>
+ - libxpm 1:3.5.17-1
NOTE: https://www.openwall.com/lists/oss-security/2023/10/03/1
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/7e21cb63b9a1ca760a06cc4cd9b19bbc3fcd8f51
CVE-2023-43788 [libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()]
- - libxpm <unfixed>
+ - libxpm 1:3.5.17-1
NOTE: https://www.openwall.com/lists/oss-security/2023/10/03/1
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/2fa554b01ef6079a9b35df9332bdc4f139ed67e0
CVE-2023-43787 [ibX11: integer overflow in XCreateImage() leading to a heap overflow]
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b05bd7b84a4c33baf43c3f2abdf05054421e4501
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b05bd7b84a4c33baf43c3f2abdf05054421e4501
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231005/7e49fae6/attachment.htm>
More information about the debian-security-tracker-commits
mailing list