[Git][security-tracker-team/security-tracker][master] Add CVE-2022-43358/libasass

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Aug 24 08:29:14 BST 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4e616d65 by Salvatore Bonaccorso at 2023-08-24T09:28:39+02:00
Add CVE-2022-43358/libasass

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -59473,7 +59473,8 @@ CVE-2022-43360
 CVE-2022-43359 (Gifdec commit 1dcbae19363597314f6623010cc80abad4e47f7c was discovered  ...)
 	NOT-FOR-US: Gifdec
 CVE-2022-43358 (Stack overflow vulnerability in ast_selectors.cpp: in function Sass::C ...)
-	TODO: check
+	- libsass <unfixed>
+	NOTE: https://github.com/sass/libsass/issues/3178
 CVE-2022-43357 (Stack overflow vulnerability in ast_selectors.cpp in function Sass::Co ...)
 	TODO: check
 CVE-2022-43356



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4e616d65d23bd4f2df5d391fb1f3eb981d41967e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4e616d65d23bd4f2df5d391fb1f3eb981d41967e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230824/e86270be/attachment.htm>


More information about the debian-security-tracker-commits mailing list