[Git][security-tracker-team/security-tracker][master] CVE-2021-44648/gdk-pixbuf: stretch not-affected
Sylvain Beucler (@beuc)
beuc at debian.org
Thu Jan 13 17:05:23 GMT 2022
Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker
Commits:
36154cb3 by Sylvain Beucler at 2022-01-13T18:04:13+01:00
CVE-2021-44648/gdk-pixbuf: stretch not-affected
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -7690,8 +7690,10 @@ CVE-2021-44649 (Django CMS 3.7.3 does not validate the plugin_type parameter whi
TODO: check
CVE-2021-44648 (GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulner ...)
- gdk-pixbuf <unfixed>
+ [stretch] - gdk-pixbuf <not-affected> (Vulnerable code introduced later)
NOTE: https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/136
NOTE: https://sahildhar.github.io/blogpost/GdkPixbuf-Heap-Buffer-Overflow-in-lzw_decoder_new/
+ NOTE: Introduced by: https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/b88f1ce91a610a4e491a4ad6352183791e78afac (2.39.2)
CVE-2021-44647 (Lua 5.4.4 and 5.4.2 are affected by SEGV by type confusion in funcname ...)
TODO: check
CVE-2021-44646
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/36154cb3dcaeb946959862bdafc318a6f3c43620
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/36154cb3dcaeb946959862bdafc318a6f3c43620
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220113/f7ecf5c9/attachment.htm>
More information about the debian-security-tracker-commits
mailing list