diff options
author | Salvatore Bonaccorso <carnil@debian.org> | 2022-01-02 22:30:27 +0100 |
---|---|---|
committer | Salvatore Bonaccorso <carnil@debian.org> | 2022-01-02 22:30:27 +0100 |
commit | 0494f8bdd59c176c03d9790fc18012ed69eaef56 (patch) | |
tree | a9c96b5b6b9c679c9f85a5359d7b3b5a1079f382 | |
parent | 48c7393473d9d61458f1bf1a4a5c6687451e02c7 (diff) |
Add initial tracking for CVE-2021-45931
-rw-r--r-- | data/CVE/list.2021 | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/data/CVE/list.2021 b/data/CVE/list.2021 index ddf519c27e..f8afc92fdc 100644 --- a/data/CVE/list.2021 +++ b/data/CVE/list.2021 @@ -153,7 +153,11 @@ CVE-2021-45933 (wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (8 bytes) CVE-2021-45932 (wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (4 bytes) in Mqt ...) TODO: check CVE-2021-45931 (HarfBuzz 2.9.0 has an out-of-bounds write in hb_bit_set_invertible_t:: ...) - TODO: check + - harfbuzz <undetermined> + NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37425 + NOTE: https://github.com/google/oss-fuzz-vulns/blob/main/vulns/harfbuzz/OSV-2021-1159.yaml + NOTE: https://github.com/harfbuzz/harfbuzz/commit/d3e09bf4654fe5478b6dbf2b26ebab6271317d81 (2.9.1) + TODO: check correctness of commit, might not affect any Debian released version CVE-2021-45930 (Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-o ...) - qtsvg-opensource-src <unfixed> (bug #1002991) NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37025 |