[Git][security-tracker-team/security-tracker][master] libstb fixed

Moritz Muehlenhoff jmm at debian.org
Fri Sep 20 09:40:23 BST 2019



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b1743ec7 by Moritz Muehlenhoff at 2019-09-20T08:40:03Z
libstb fixed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -10507,31 +10507,31 @@ CVE-2019-13224 (A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6
 	[stretch] - libonig <no-dsa> (Minor issue)
 	NOTE: https://github.com/kkos/oniguruma/commit/0f7f61ed1b7b697e283e37bd2d731d0bd57adb55
 CVE-2019-13223 (A reachable assertion in the lookup1_values function in stb_vorbis thr ...)
-	- libstb <unfixed> (bug #934966)
+	- libstb 0.0~git20190817.1.052dce1-1 (bug #934966)
 	[buster] - libstb <no-dsa> (Minor issue)
 	NOTE: https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6
 CVE-2019-13222 (An out-of-bounds read of a global buffer in the draw_line function in  ...)
-	- libstb <unfixed> (bug #934966)
+	- libstb 0.0~git20190817.1.052dce1-1 (bug #934966)
 	[buster] - libstb <no-dsa> (Minor issue)
 	NOTE: https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6
 CVE-2019-13221 (A stack buffer overflow in the compute_codewords function in stb_vorbi ...)
-	- libstb <unfixed> (bug #934966)
+	- libstb 0.0~git20190817.1.052dce1-1 (bug #934966)
 	[buster] - libstb <no-dsa> (Minor issue)
 	NOTE: https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6
 CVE-2019-13220 (Use of uninitialized stack variables in the start_decoder function in  ...)
-	- libstb <unfixed> (bug #934966)
+	- libstb 0.0~git20190817.1.052dce1-1 (bug #934966)
 	[buster] - libstb <no-dsa> (Minor issue)
 	NOTE: https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6
 CVE-2019-13219 (A NULL pointer dereference in the get_window function in stb_vorbis th ...)
-	- libstb <unfixed> (bug #934966)
+	- libstb 0.0~git20190817.1.052dce1-1 (bug #934966)
 	[buster] - libstb <no-dsa> (Minor issue)
 	NOTE: https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6
 CVE-2019-13218 (Division by zero in the predict_point function in stb_vorbis through 2 ...)
-	- libstb <unfixed> (bug #934966)
+	- libstb 0.0~git20190817.1.052dce1-1 (bug #934966)
 	[buster] - libstb <no-dsa> (Minor issue)
 	NOTE: https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6
 CVE-2019-13217 (A heap buffer overflow in the start_decoder function in stb_vorbis thr ...)
-	- libstb <unfixed> (bug #934966)
+	- libstb 0.0~git20190817.1.052dce1-1 (bug #934966)
 	[buster] - libstb <no-dsa> (Minor issue)
 	NOTE: https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6
 CVE-2019-13216



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/b1743ec73e2c8c898b4f0b9ac455fa2702ff6152

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/b1743ec73e2c8c898b4f0b9ac455fa2702ff6152
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190920/a74af41d/attachment.html>


More information about the debian-security-tracker-commits mailing list