[Git][security-tracker-team/security-tracker][master] Add three libstb issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
aa961a3a by Salvatore Bonaccorso at 2022-04-22T09:28:27+02:00
Add three libstb issues

Impact on other embedding sources might need to be evaluated.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4213,7 +4213,9 @@ CVE-2022-28050
 CVE-2022-28049 (NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference v ...)
 	NOT-FOR-US: njs
 CVE-2022-28048 (STB v2.27 was discovered to contain an integer shift of invalid size i ...)
-	TODO: check
+	- libstb <unfixed>
+	NOTE: https://github.com/nothings/stb/issues/1293
+	NOTE: https://github.com/nothings/stb/pull/1297
 CVE-2022-28047
 	RESERVED
 CVE-2022-28046
@@ -4227,9 +4229,13 @@ CVE-2022-28044 (Irzip v0.640 was discovered to contain a heap memory corruption
 CVE-2022-28043
 	RESERVED
 CVE-2022-28042 (stb_image.h v2.27 was discovered to contain an heap-based use-after-fr ...)
-	TODO: check
+	- libstb <unfixed>
+	NOTE: https://github.com/nothings/stb/issues/1289
+	NOTE: https://github.com/nothings/stb/pull/1297
 CVE-2022-28041 (stb_image.h v2.27 was discovered to contain an integer overflow via th ...)
-	TODO: check
+	- libstb <unfixed>
+	NOTE: https://github.com/nothings/stb/issues/1292
+	NOTE: https://github.com/nothings/stb/pull/1297
 CVE-2022-28040
 	RESERVED
 CVE-2022-28039



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aa961a3a8c7c26011487576b73417c4f0461964e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aa961a3a8c7c26011487576b73417c4f0461964e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220422/2faa5c69/attachment.htm>