Skip to content
Commits on Source (2)
Show whitespace changes
Inline Side-by-side
data/CVE/list
View file @ a62fe52d
......@@ -554,6 +554,7 @@ CVE-2019-13963
RESERVED
CVE-2019-13962 (lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC medi ...)
- vlc <unfixed>
[jessie] - vlc <end-of-life> (https://lists.debian.org/debian-security-announce/2018/msg00130.html)
NOTE: http://git.videolan.org/?p=vlc/vlc-3.0.git;a=commit;h=2b4f9d0b0e0861f262c90e9b9b94e7d53b864509
NOTE: https://trac.videolan.org/vlc/ticket/22240
CVE-2019-13961 (A CSRF vulnerability was found in flatCore before 1.5, leading to the ...)
......@@ -1285,6 +1286,7 @@ CVE-2019-13615 (VideoLAN VLC media player 3.0.7.1 has a heap-based buffer over-r
- vlc <unfixed> (bug #932241)
[buster] - vlc <postponed> (Minor issue, wait until next 3.0.x release)
[stretch] - vlc <postponed> (Minor issue, wait until next 3.0.x release)
[jessie] - vlc <end-of-life> (https://lists.debian.org/debian-security-announce/2018/msg00130.html)
NOTE: https://trac.videolan.org/vlc/ticket/22474
CVE-2019-13614 (CMD_SET_CONFIG_COUNTRY in the TP-Link Device Debug protocol in TP-Link ...)
NOT-FOR-US: TP-Link
......@@ -2301,6 +2303,7 @@ CVE-2019-13602 (An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp
- vlc 3.0.7.1-2 (bug #932131)
[buster] - vlc <postponed> (Minor issue, wait until next 3.0.x release)
[stretch] - vlc <postponed> (Minor issue, wait until next 3.0.x release)
[jessie] - vlc <end-of-life> (https://lists.debian.org/debian-security-announce/2018/msg00130.html)
NOTE: https://git.videolan.org/?p=vlc.git;a=commit;h=8e8e0d72447f8378244f5b4a3dcde036dbeb1491
NOTE: https://git.videolan.org/?p=vlc.git;a=commit;h=b2b157076d9e94df34502dd8df0787deb940e938
CVE-2019-13601
data/dla-needed.txt
View file @ a62fe52d
......@@ -13,6 +13,9 @@ https://wiki.debian.org/LTS/Development#Triage_new_security_issues
cfengine3
NOTE: 20190628: likely not affected by CVE-2019-9929, but other not-yet-CVE'ed issues ahead
--
exim4
NOTE: Jessie probably affected, no details published yet
--
faad2 (Hugo Lefeuvre)
NOTE: 20190519: I have a few patches pending for open issues. Will be PR-ed soon.
NOTE: 20190525: see https://github.com/knik0/faad2/pull/36
......