Felix Geyer pushed to branch master at Debian Security Tracker / security-tracker
Commits: 7ba749df by Felix Geyer at 2018-03-05T18:49:21+01:00 Add patch links for recent libsdl2-image CVEs - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== --- a/data/CVE/list +++ b/data/CVE/list @@ -28884,16 +28884,19 @@ CVE-2017-14450 [Simple DirectMedia Layer SDL2_Image LWZ Decompression Buffer Ove RESERVED - libsdl2-image 2.0.3+dfsg1-1 NOTE: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0499 + NOTE: http://hg.libsdl.org/SDL_image/rev/45e750f92c84 TODO: check sdl-image1.2 CVE-2017-14449 [Simple DirectMedia Layer SDL2_image do_layer_surface Double-Free Vulnerability] RESERVED - libsdl2-image 2.0.3+dfsg1-1 NOTE: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0498 + NOTE: http://hg.libsdl.org/SDL_image/rev/d0142861559c TODO: check sdl-image1.2 CVE-2017-14448 [Simple DirectMedia Layer SDL2_image load_xcf_tile_rle Decompression Code Execution Vulnerability] RESERVED - libsdl2-image 2.0.3+dfsg1-1 NOTE: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0497 + NOTE: http://hg.libsdl.org/SDL_image/rev/7df1580f1695 TODO: check sdl-image1.2 CVE-2017-14447 RESERVED @@ -28909,16 +28912,19 @@ CVE-2017-14442 [Simple DirectMedia Layer SDL2_image Image Palette Population Cod RESERVED - libsdl2-image 2.0.3+dfsg1-1 NOTE: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0491 + NOTE: http://hg.libsdl.org/SDL_image/rev/37445f6180a8 TODO: check sdl-image1.2 CVE-2017-14441 [Simple DirectMedia Layer SDL2_image ICO Pitch Handling Code Execution Vulnerability] RESERVED - libsdl2-image 2.0.3+dfsg1-1 NOTE: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0490 + NOTE: http://hg.libsdl.org/SDL_image/rev/a1e9b624ca10 TODO: check sdl-image1.2 CVE-2017-14440 [Simple DirectMedia Layer SDL2_image ILBM CMAP Parsing Code Execution Vulnerability] RESERVED - libsdl2-image 2.0.3+dfsg1-1 NOTE: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0489 + NOTE: http://hg.libsdl.org/SDL_image/rev/bfa08dc02b3c TODO: check sdl-image1.2 CVE-2017-14439 RESERVED @@ -35867,6 +35873,8 @@ CVE-2017-12122 [Simple DirectMedia Layer SDL2_Image IMG_LoadLBM_RW Code Executio RESERVED - libsdl2-image 2.0.3+dfsg1-1 NOTE: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0488 + NOTE: http://hg.libsdl.org/SDL_image/rev/16772bbb1b09 + NOTE: http://hg.libsdl.org/SDL_image/rev/97f7f01e0665 TODO: check sdl-image1.2 CVE-2017-12121 RESERVED View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7ba749dff2474fedcfdde47fdcc81593cd45de21 --- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7ba749dff2474fedcfdde47fdcc81593cd45de21 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits