[Git][security-tracker-team/security-tracker][master] Add three libstb issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Apr 22 08:29:07 BST 2022
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
aa961a3a by Salvatore Bonaccorso at 2022-04-22T09:28:27+02:00
Add three libstb issues
Impact on other embedding sources might need to be evaluated.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4213,7 +4213,9 @@ CVE-2022-28050
CVE-2022-28049 (NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference v ...)
NOT-FOR-US: njs
CVE-2022-28048 (STB v2.27 was discovered to contain an integer shift of invalid size i ...)
- TODO: check
+ - libstb <unfixed>
+ NOTE: https://github.com/nothings/stb/issues/1293
+ NOTE: https://github.com/nothings/stb/pull/1297
CVE-2022-28047
RESERVED
CVE-2022-28046
@@ -4227,9 +4229,13 @@ CVE-2022-28044 (Irzip v0.640 was discovered to contain a heap memory corruption
CVE-2022-28043
RESERVED
CVE-2022-28042 (stb_image.h v2.27 was discovered to contain an heap-based use-after-fr ...)
- TODO: check
+ - libstb <unfixed>
+ NOTE: https://github.com/nothings/stb/issues/1289
+ NOTE: https://github.com/nothings/stb/pull/1297
CVE-2022-28041 (stb_image.h v2.27 was discovered to contain an integer overflow via th ...)
- TODO: check
+ - libstb <unfixed>
+ NOTE: https://github.com/nothings/stb/issues/1292
+ NOTE: https://github.com/nothings/stb/pull/1297
CVE-2022-28040
RESERVED
CVE-2022-28039
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aa961a3a8c7c26011487576b73417c4f0461964e
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aa961a3a8c7c26011487576b73417c4f0461964e
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220422/2faa5c69/attachment.htm>
More information about the debian-security-tracker-commits
mailing list