[Git][security-tracker-team/security-tracker][master] new flvmeta non issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
74a4bb27 by Moritz Muehlenhoff at 2023-06-23T16:58:25+02:00
new flvmeta non issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -83,7 +83,10 @@ CVE-2023-36355 (TP-Link TL-WR940N V4 was discovered to contain a buffer overflow
 CVE-2023-36354 (TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/ ...)
 	NOT-FOR-US: TP-Link
 CVE-2023-36243 (FLVMeta v1.2.1 was discovered to contain a buffer overflow via the xml ...)
-	TODO: check
+	- flvmeta <unfixed> (unimportant)
+	NOTE: https://github.com/noirotm/flvmeta/issues/19
+	NOTE: https://github.com/noirotm/flvmeta/commit/7b91e5656e27b16639c8de156878c7624346cbd4
+	NOTE: Crash in CLI tool, no security impact
 CVE-2023-36239 (libming listswf 0.4.7 was discovered to contain a buffer overflow in t ...)
 	- ming <removed>
 	NOTE: https://github.com/libming/libming/issues/273



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/74a4bb27e9b3262e44d194932af35f453477623c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/74a4bb27e9b3262e44d194932af35f453477623c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230623/c5f621d2/attachment-0001.htm>