[Git][security-tracker-team/security-tracker][master] Add tracking of libstb itself for CVE-2018-16981/libstb

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8183e069 by Salvatore Bonaccorso at 2019-08-17T13:36:25Z
Add tracking of libstb itself for CVE-2018-16981/libstb

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -49137,7 +49137,9 @@ CVE-2018-16982 (Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a
 	NOT-FOR-US: Open Chinese Convert (OpenCC)
 CVE-2018-16981 (stb stb_image.h 2.19, as used in catimg, Emscripten, and other product ...)
 	- catimg <undetermined>
+	- libstb 0.0~git20190617.5.c72a95d-1
 	NOTE: https://github.com/nothings/stb/issues/656
+	NOTE: https://github.com/nothings/stb/commit/50b1bfba583b12ceb23ef949567bdd914461e524
 	TODO: further check, stb_image.h in older version is embedded in src:catimg
 CVE-2018-16980 (dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/ ...)
 	NOT-FOR-US: dotCMS



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8183e069e43673f6ff1e8807d1fb9e863b4be24a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8183e069e43673f6ff1e8807d1fb9e863b4be24a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190817/b38caec7/attachment.html>