diff options
| author | Salvatore Bonaccorso <carnil@debian.org> | 2021-01-18 07:20:46 +0100 |
|---|---|---|
| committer | Salvatore Bonaccorso <carnil@debian.org> | 2021-01-18 07:20:46 +0100 |
| commit | ab175cb12c29f58b15e691bfa27fa24addde4804 (patch) | |
| tree | f774749b3b75f1657d928da676fab7a572da4a00 /data/CVE/2018.list | |
| parent | c2ab04a99a60a2e8040f90b33e70eb9c90eebb58 (diff) | |
Update status on two unimportant liblnk issues
Both seem indeed to be adressed, but note for reviewers, please
double-check.
Diffstat (limited to 'data/CVE/2018.list')
| -rw-r--r-- | data/CVE/2018.list | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/data/CVE/2018.list b/data/CVE/2018.list index 10b5967967..ac91be8c28 100644 --- a/data/CVE/2018.list +++ b/data/CVE/2018.list @@ -24319,17 +24319,19 @@ CVE-2018-12098 (** DISPUTED ** The liblnk_data_block_read function in liblnk_dat NOTE: https://github.com/libyal/liblnk/issues/33 NOTE: Questionable/negligabe security impact CVE-2018-12097 (** DISPUTED ** The liblnk_location_information_read_data function in l ...) - - liblnk <unfixed> (unimportant; bug #901962) + - liblnk 20180626-1 (unimportant; bug #901962) NOTE: http://seclists.org/fulldisclosure/2018/Jun/33 NOTE: https://github.com/libyal/liblnk/commit/cb7fe0c66a5a01c19f1953fc7814c4fedfdc5785 NOTE: https://github.com/libyal/liblnk/issues/32 NOTE: https://github.com/libyal/liblnk/issues/33 NOTE: Questionable/negligabe security impact CVE-2018-12096 (** DISPUTED ** The liblnk_data_string_get_utf8_string_size function in ...) - - liblnk <unfixed> (unimportant; bug #901962) + - liblnk 20180626-1 (unimportant; bug #901962) NOTE: http://seclists.org/fulldisclosure/2018/Jun/33 NOTE: https://github.com/libyal/liblnk/issues/32 NOTE: https://github.com/libyal/liblnk/issues/33 + NOTE: https://github.com/libyal/libuna/commit/aca678aa7e49ca628f1b27a53fdea883fa8764bb + NOTE: https://github.com/libyal/libuna/commit/f22aca8b649afe5cef529d9268186bfe591b7f89 NOTE: Questionable/negligabe security impact CVE-2018-12095 (A Reflected Cross-Site Scripting web vulnerability has been discovered ...) NOT-FOR-US: OEcms |