diff options
| author | Salvatore Bonaccorso <carnil@debian.org> | 2022-01-02 22:30:27 +0100 |
|---|---|---|
| committer | Salvatore Bonaccorso <carnil@debian.org> | 2022-01-02 22:30:27 +0100 |
| commit | 0c6a1ef4ebc8b0671113a9c97b376d3815e61663 (patch) | |
| tree | 5f231952b882854d9138ddbfd624ca643bf346b5 | |
| parent | f9a1248cea21c8bfd02eb55aab6f34740917f995 (diff) | |
Add initial tracking for CVE-2021-45931
| -rw-r--r-- | data/CVE/2021.list | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/data/CVE/2021.list b/data/CVE/2021.list index ddf519c27e..f8afc92fdc 100644 --- a/data/CVE/2021.list +++ b/data/CVE/2021.list @@ -153,7 +153,11 @@ CVE-2021-45933 (wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (8 bytes) CVE-2021-45932 (wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (4 bytes) in Mqt ...) TODO: check CVE-2021-45931 (HarfBuzz 2.9.0 has an out-of-bounds write in hb_bit_set_invertible_t:: ...) - TODO: check + - harfbuzz <undetermined> + NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37425 + NOTE: https://github.com/google/oss-fuzz-vulns/blob/main/vulns/harfbuzz/OSV-2021-1159.yaml + NOTE: https://github.com/harfbuzz/harfbuzz/commit/d3e09bf4654fe5478b6dbf2b26ebab6271317d81 (2.9.1) + TODO: check correctness of commit, might not affect any Debian released version CVE-2021-45930 (Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-o ...) - qtsvg-opensource-src <unfixed> (bug #1002991) NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37025 |