FEDORA-EPEL-2018-cde256f1e4 — security update for discount

stable

discount-2.2.4-1.el7

FEDORA-EPEL-2018-cde256f1e4 created by greghellings 6 years ago for Fedora EPEL 7

Upstream version 2.2.4

This update has been submitted for testing by greghellings.

6 years ago

This update has been pushed to testing.

6 years ago

lobocode commented & provided feedback 6 years ago

karma

works

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

6 years ago

This update has been submitted for batched by greghellings.

6 years ago

This update has been submitted for stable by bodhi.

6 years ago

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

Builds

discount-2.2.4-1.el7

BZ#1582640 CVE-2018-11468 discount: heap-based buffer over-read __mkd_trim_line function in mkdio.c

BZ#1583001 CVE-2018-11503 discount: Heap-based buffer-overflow in markdown.c:isfootnote() allows for denial of service

BZ#1583002 CVE-2018-11503 discount: Heap-based buffer-overflow in markdown.c:isfootnote() allows for denial of service [epel-7]

BZ#1583005 CVE-2018-11504 discount: Heap-based buffer-overflow in markdown.c:islist() allows for denial of service

BZ#1583008 CVE-2018-11504 discount: Heap-based buffer-overflow in markdown.c:islist() allows for denial of service [epel-7]

BZ#1592866 CVE-2018-12495 discount: heap-based buffer over-read via a crafted file

BZ#1592869 CVE-2018-12495 discount: heap-based buffer over-read via a crafted file [epel-7]

discount-2.2.4-1.el7

Automated Test Results

ignored