Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
aa961a3a by Salvatore Bonaccorso at 2022-04-22T09:28:27+02:00
Add three libstb issues
Impact on other embedding sources might need to be evaluated.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4213,7 +4213,9 @@ CVE-2022-28050
CVE-2022-28049 (NGINX NJS 0.7.2 was discovered to contain a NULL pointer
dereference v ...)
NOT-FOR-US: njs
CVE-2022-28048 (STB v2.27 was discovered to contain an integer shift of
invalid size i ...)
- TODO: check
+ - libstb <unfixed>
+ NOTE: https://github.com/nothings/stb/issues/1293
+ NOTE: https://github.com/nothings/stb/pull/1297
CVE-2022-28047
RESERVED
CVE-2022-28046
@@ -4227,9 +4229,13 @@ CVE-2022-28044 (Irzip v0.640 was discovered to contain a
heap memory corruption
CVE-2022-28043
RESERVED
CVE-2022-28042 (stb_image.h v2.27 was discovered to contain an heap-based
use-after-fr ...)
- TODO: check
+ - libstb <unfixed>
+ NOTE: https://github.com/nothings/stb/issues/1289
+ NOTE: https://github.com/nothings/stb/pull/1297
CVE-2022-28041 (stb_image.h v2.27 was discovered to contain an integer
overflow via th ...)
- TODO: check
+ - libstb <unfixed>
+ NOTE: https://github.com/nothings/stb/issues/1292
+ NOTE: https://github.com/nothings/stb/pull/1297
CVE-2022-28040
RESERVED
CVE-2022-28039
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aa961a3a8c7c26011487576b73417c4f0461964e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aa961a3a8c7c26011487576b73417c4f0461964e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
