summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2020-12-16 06:29:59 +0100
committerSalvatore Bonaccorso <carnil@debian.org>2020-12-16 06:29:59 +0100
commit6600433de29fbaa4d1fa1f6da0754f9d600dea49 (patch)
tree2d8dba7a99bb3ce4cb114afb69c0fd125159e50b
parentcece96352bca7ce5931b23975e0c98d586fde6df (diff)
Replace some old code hosting references to new location
-rw-r--r--data/CVE/2014.list6
-rw-r--r--data/CVE/2017.list4
-rw-r--r--data/CVE/2018.list2
3 files changed, 6 insertions, 6 deletions
diff --git a/data/CVE/2014.list b/data/CVE/2014.list
index 84b3d25a66..bfea2d3db9 100644
--- a/data/CVE/2014.list
+++ b/data/CVE/2014.list
@@ -4306,8 +4306,8 @@ CVE-2014-9028 (Heap-based buffer overflow in stream_decoder.c in libFLAC before
{DSA-3082-1 DLA-99-1}
- flac 1.3.0-3 (bug #770918)
NOTE: Upstream patches:
- NOTE: https://git.xiph.org/?p=flac.git;a=commit;h=fcf0ba06ae12ccd7c67cee3c8d948df15f946b85
- NOTE: https://git.xiph.org/?p=flac.git;a=patch;h=5a365996d739bdf4711af51d9c2c71c8a5e14660
+ NOTE: https://github.com/xiph/flac/commit/fcf0ba06ae12ccd7c67cee3c8d948df15f946b85 (1.3.1pre1)
+ NOTE: https://github.com/xiph/flac/commit/5a365996d739bdf4711af51d9c2c71c8a5e14660 (1.3.1)
CVE-2014-9014 (Directory traversal vulnerability in the ajaxinit function in wpmarket ...)
NOT-FOR-US: WP Marketplace plugin for WordPress
CVE-2014-9013 (The ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketp ...)
@@ -4438,7 +4438,7 @@ CVE-2014-8963
CVE-2014-8962 (Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3. ...)
{DSA-3082-1 DLA-99-1}
- flac 1.3.0-3 (bug #770918)
- NOTE: https://git.xiph.org/?p=flac.git;a=patch;h=5b3033a2b355068c11fe637e14ac742d273f076e
+ NOTE: https://github.com/xiph/flac/commit/5b3033a2b355068c11fe637e14ac742d273f076e (1.3.1pre1)
NOTE: http://lists.xiph.org/pipermail/flac-dev/2014-November/005185.html
CVE-2014-8961 (Directory traversal vulnerability in libraries/error_report.lib.php in ...)
- phpmyadmin 4:4.2.12-1
diff --git a/data/CVE/2017.list b/data/CVE/2017.list
index e6efde7334..f976aaf924 100644
--- a/data/CVE/2017.list
+++ b/data/CVE/2017.list
@@ -34925,7 +34925,7 @@ CVE-2017-6888 (An error in the "read_metadata_vorbiscomment_()" function (src/li
[jessie] - flac <no-dsa> (Minor issue)
[wheezy] - flac <no-dsa> (Minor issue)
NOTE: https://secuniaresearch.flexerasoftware.com/secunia_research/2017-7/
- NOTE: https://git.xiph.org/?p=flac.git;a=commit;h=4f47b63e9c971e6391590caf00a0f2a5ed612e67 (broken link)
+ NOTE: https://github.com/xiph/flac/commit/4f47b63e9c971e6391590caf00a0f2a5ed612e67 (1.3.3)
NOTE: https://android.googlesource.com/platform/external/flac/+/4f47b63e9c971e6391590caf00a0f2a5ed612e67
CVE-2017-6887 (A boundary error within the "parse_tiff_ifd()" function (internal/dcra ...)
{DSA-3950-1 DLA-1057-1}
@@ -50994,7 +50994,7 @@ CVE-2017-0381 (An information disclosure vulnerability in silk/NLSF_stabilize.c
- opus 1.2~alpha2-1 (bug #851612)
[jessie] - opus <ignored> (Minor issue, https://bugs.debian.org/851612#10)
NOTE: Fixed by: https://github.com/xiph/opus/commit/79e8f527b0344b0897a65be35e77f7885bd99409 (v1.2-alpha)
- NOTE: https://git.xiph.org/?p=opus.git;a=commitdiff;h=70a3d641b
+ NOTE: https://github.com/xiph/opus/commit/70a3d641b760b3d313b6025f82aed93a460720e5
CVE-2017-0380 (The rend_service_intro_established function in or/rendservice.c in Tor ...)
{DSA-3993-1}
- tor 0.3.1.7-1 (bug #876221)
diff --git a/data/CVE/2018.list b/data/CVE/2018.list
index 1a3a1863d0..7b36a4ddef 100644
--- a/data/CVE/2018.list
+++ b/data/CVE/2018.list
@@ -43202,7 +43202,7 @@ CVE-2018-5146 (An out of bounds memory write while processing Vorbis audio data
- firefox-esr 52.7.2esr-1
- thunderbird 1:52.7.0-1
- libvorbis 1.3.5-4.2 (bug #893130)
- NOTE: https://git.xiph.org/?p=vorbis.git;a=commit;h=667ceb4aab60c1f74060143bb24e5f427b3cce5f
+ NOTE: https://github.com/xiph/vorbis/commit/667ceb4aab60c1f74060143bb24e5f427b3cce5f (v1.3.6)
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2018-08/
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2018-09/
CVE-2018-5145 (Memory safety bugs were reported in Firefox ESR 52.6. These bugs showe ...)

© 2014-2024 Faster IT GmbH | imprint | privacy policy