[Git][security-tracker-team/security-tracker][master] Add CVE-2024-56431/libtheora

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
df8678a6 by Salvatore Bonaccorso at 2024-12-25T21:42:07+01:00
Add CVE-2024-56431/libtheora

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,7 +1,9 @@
 CVE-2024-8950 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
 	NOT-FOR-US: Arne Informatics Piramit Automation
 CVE-2024-56431 (oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 71 ...)
-	TODO: check
+	- libtheora <unfixed>
+	NOTE: https://github.com/UnionTech-Software/libtheora-CVE-2024-56431-PoC
+	TODO: check details
 CVE-2024-56430 (OpenFHE through 1.2.3 has a NULL pointer dereference in BinFHEContext: ...)
 	NOT-FOR-US: OpenFHE
 CVE-2024-53291 (Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensiti ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/df8678a60b012a4a2d9f867db91ab44ea5bdbe4a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/df8678a60b012a4a2d9f867db91ab44ea5bdbe4a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241225/c1694f89/attachment.htm>