Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e130c0ce by Salvatore Bonaccorso at 2019-11-06T20:17:33Z
Add CVE-2019-1879{7,8,9}/libsass
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,11 +1,14 @@
CVE-2019-18800 (Viber through 11.7.0.5 allows a remote attacker who can
capture a vict ...)
TODO: check
CVE-2019-18799 (LibSass before 3.6.3 allows a NULL pointer dereference in
Sass::Parser ...)
- TODO: check
+ - libsass <unfixed>
+ NOTE: https://github.com/sass/libsass/issues/3001
CVE-2019-18798 (LibSass before 3.6.3 allows a heap-based buffer over-read in
Sass::wea ...)
- TODO: check
+ - libsass <unfixed>
+ NOTE: https://github.com/sass/libsass/issues/2999
CVE-2019-18797 (LibSass 3.6.1 has uncontrolled recursion in
Sass::Eval::operator()(Sas ...)
- TODO: check
+ - libsass <unfixed>
+ NOTE: https://github.com/sass/libsass/issues/3000
CVE-2019-18796
RESERVED
CVE-2019-18795
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/e130c0ce3842f709abd8c5ad95f8369525cd81fd
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/e130c0ce3842f709abd8c5ad95f8369525cd81fd
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
