[Git][security-tracker-team/security-tracker][master] libsass fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2ba45f82 by Moritz Muehlenhoff at 2023-12-30T20:55:56+01:00
libsass fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -81656,14 +81656,14 @@ CVE-2022-43359 (Gifdec commit 1dcbae19363597314f6623010cc80abad4e47f7c was disco
 	NOT-FOR-US: Gifdec
 CVE-2022-43358 (Stack overflow vulnerability in ast_selectors.cpp: in function Sass::C ...)
 	[experimental] - libsass 3.6.5+20231221-1
-	- libsass <unfixed> (bug #1051895)
+	- libsass 3.6.5+20231221-2 (bug #1051895)
 	[bookworm] - libsass <no-dsa> (Minor issue)
 	[bullseye] - libsass <no-dsa> (Minor issue)
 	[buster] - libsass <no-dsa> (Minor issue)
 	NOTE: https://github.com/sass/libsass/issues/3178
 CVE-2022-43357 (Stack overflow vulnerability in ast_selectors.cpp in function Sass::Co ...)
 	[experimental] - libsass 3.6.5+20231221-1
-	- libsass <unfixed> (bug #1051893)
+	- libsass 3.6.5+20231221-2 (bug #1051895)
 	[bookworm] - libsass <no-dsa> (Minor issue)
 	[bullseye] - libsass <no-dsa> (Minor issue)
 	[buster] - libsass <no-dsa> (Minor issue)
@@ -128882,7 +128882,7 @@ CVE-2022-26593 (Cross-site scripting (XSS) vulnerability in the Asset module's a
 	NOT-FOR-US: Liferay
 CVE-2022-26592 (Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector ...)
 	[experimental] - libsass 3.6.5+20231221-1
-	- libsass <unfixed> (bug #1051894)
+	- libsass 3.6.5+20231221-2 (bug #1051895)
 	[bookworm] - libsass <no-dsa> (Minor issue)
 	[bullseye] - libsass <no-dsa> (Minor issue)
 	[buster] - libsass <no-dsa> (Minor issue)
@@ -297083,7 +297083,7 @@ CVE-2019-18797 (LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operator
 	[buster] - libsass <no-dsa> (Minor issue)
 	[stretch] - libsass <no-dsa> (Minor issue)
 	NOTE: https://github.com/sass/libsass/issues/3000
-	NOTE: Not considered a security issue be upstream
+	NOTE: Not considered a security issue by upstream
 CVE-2019-18796 (The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamC ...)
 	NOT-FOR-US: BASS Audio Library
 CVE-2019-18795 (The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamC ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2ba45f82ca092693196147790ef731923a437e66

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2ba45f82ca092693196147790ef731923a437e66
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231230/43f38141/attachment-0001.htm>