[Git][security-tracker-team/security-tracker][master] CVE-2021-44648/gdk-pixbuf: stretch not-affected

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
36154cb3 by Sylvain Beucler at 2022-01-13T18:04:13+01:00
CVE-2021-44648/gdk-pixbuf: stretch not-affected

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7690,8 +7690,10 @@ CVE-2021-44649 (Django CMS 3.7.3 does not validate the plugin_type parameter whi
 	TODO: check
 CVE-2021-44648 (GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulner ...)
 	- gdk-pixbuf <unfixed>
+	[stretch] - gdk-pixbuf <not-affected> (Vulnerable code introduced later)
 	NOTE: https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/136
 	NOTE: https://sahildhar.github.io/blogpost/GdkPixbuf-Heap-Buffer-Overflow-in-lzw_decoder_new/
+	NOTE: Introduced by: https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/b88f1ce91a610a4e491a4ad6352183791e78afac (2.39.2)
 CVE-2021-44647 (Lua 5.4.4 and 5.4.2 are affected by SEGV by type confusion in funcname ...)
 	TODO: check
 CVE-2021-44646



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/36154cb3dcaeb946959862bdafc318a6f3c43620

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/36154cb3dcaeb946959862bdafc318a6f3c43620
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220113/f7ecf5c9/attachment.htm>