svn commit: r475267 - head/security/vuxml
Fernando Apesteguía
fernape at FreeBSD.org
Tue Jul 24 18:08:48 UTC 2018
Author: fernape
Date: Tue Jul 24 18:08:47 2018
New Revision: 475267
URL: https://svnweb.freebsd.org/changeset/ports/475267
Log:
Document vulnerabilities for graphics/sixel 1.8.1
* CVE-2018-14072
* CVE-2018-14073
PR: 229975
Reported by: sue at iwmt.org (maintainer)
Approved by: tcberner (mentor)
Modified:
head/security/vuxml/vuln.xml
Modified: head/security/vuxml/vuln.xml
==============================================================================
--- head/security/vuxml/vuln.xml Tue Jul 24 18:01:13 2018 (r475266)
+++ head/security/vuxml/vuln.xml Tue Jul 24 18:08:47 2018 (r475267)
@@ -58,6 +58,36 @@ Notes:
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="efe43d2b-8f35-11e8-b9e8-dcfe074bd614">
+ <topic>Memory leak in different components</topic>
+ <affects>
+ <package>
+ <name>libsixel</name>
+ <range><lt>1.8.2,1</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>MITRE reports:</p>
+ <blockquote cite="https://nvd.nist.gov/vuln/detail/CVE-2018-14072">
+ <p>bsixel 1.8.1 has a memory leak in sixel_decoder_decode in
+ decoder.c, image_buffer_resize in fromsixel.c, sixel_decode_raw in
+ fromsixel.c and sixel_allocator_new in allocator.c</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2018-14072</cvename>
+ <cvename>CVE-2018-14073</cvename>
+ <url>https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14072</url>
+ <url>https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14073</url>
+ </references>
+ <dates>
+ <discovery>2018-07-15</discovery>
+ <entry>2018-07-24</entry>
+ </dates>
+ </vuln>
+
<vuln vid="dc57ad48-ecbb-439b-a4d0-5869be47684e">
<topic>vlc -- Use after free vulnerability</topic>
<affects>
More information about the svn-ports-all
mailing list