[Git][security-tracker-team/security-tracker][master] CVE-2020-23914/5 salmon fixed in sid, retroarch unaffected in Debian

[Neil Williams (@codehelp)]

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9e0bd5e1 by Neil Williams at 2022-08-09T09:02:45+01:00
CVE-2020-23914/5 salmon fixed in sid, retroarch unaffected in Debian

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -138646,11 +138646,15 @@ CVE-2020-23917
 CVE-2020-23916
 	RESERVED
 CVE-2020-23915 (An issue was discovered in cpp-peglib through v0.1.12. peg::resolve_es ...)
-	TODO: retroarch and salmon embed peglib, check if it's actually a security issue
+	- retroarch <not-affected> (peglib.h is not compiled in Debian builds)
+	- salmon 1.6.0+ds1-1
+	NOTE: Crash in CLI tool, no security impact
 	NOTE: https://github.com/yhirose/cpp-peglib/commit/b3b29ce8f3acf3a32733d930105a17d7b0ba347e
 	NOTE: https://github.com/yhirose/cpp-peglib/issues/122
 CVE-2020-23914 (An issue was discovered in cpp-peglib through v0.1.12. A NULL pointer  ...)
-	TODO: retroarch and salmon embed peglib, check if it's actually a security issue
+	- retroarch <not-affected> (peglib.h is not compiled in Debian builds)
+	- salmon 1.6.0+ds1-1
+	NOTE: Crash in CLI tool, no security impact
 	NOTE: https://github.com/yhirose/cpp-peglib/commit/0061f393de54cf0326621c079dc2988336d1ebb3
 	NOTE: https://github.com/yhirose/cpp-peglib/issues/121
 CVE-2020-23913



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9e0bd5e137df7b0d12e40aed59d377c5094967fd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9e0bd5e137df7b0d12e40aed59d377c5094967fd
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220809/281687c9/attachment.htm>