Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits: 2f159f84 by Moritz Muehlenhoff at 2019-01-28T15:31:03Z stretch triage - - - - - 2 changed files: - data/CVE/list - data/dsa-needed.txt Changes: ===================================== data/CVE/list ===================================== @@ -1954,10 +1954,12 @@ CVE-2019-6132 (An issue was discovered in Bento4 v1.5.1-627. There is a memory l NOT-FOR-US: Bento4 CVE-2019-6131 (svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack ...) - mupdf 1.14.0+ds1-3 (bug #918970) + [stretch] - mupdf <no-dsa> (Minor issue) NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=700442 NOTE: http://www.ghostscript.com/cgi-bin/findgit.cgi?c8f7e48ff74720a5e984ae19d978a5ab4d5dde5b CVE-2019-6130 (Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the ...) - mupdf 1.14.0+ds1-3 (bug #918971) + [stretch] - mupdf <no-dsa> (Minor issue) NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=700446 NOTE: http://www.ghostscript.com/cgi-bin/findgit.cgi?faf47b94e24314d74907f3f6bc874105f2c962ed CVE-2019-6129 (png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as ...) @@ -1967,6 +1969,7 @@ CVE-2019-6129 (png_create_info_struct in png.c in libpng 1.6.36 has a memory lea NOTE: Memory leak in CLI tool, no security impact CVE-2019-6128 (The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory ...) - tiff <unfixed> + [stretch] - tiff <no-dsa> (Minor issue) - tiff3 <removed> NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2836 CVE-2019-6127 (An issue was discovered in XiaoCms 20141229. It allows ...) ===================================== data/dsa-needed.txt ===================================== @@ -26,6 +26,8 @@ glusterfs graphicsmagick waiting for proper fix for CVE-2018-20185 -- +libgd2 +-- libidn santiago proposed debdiffs for jessie and stretch -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2f159f84c6b28caf6671a1268a746307c05ca8a3 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2f159f84c6b28caf6671a1268a746307c05ca8a3 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits