[Git][security-tracker-team/security-tracker][master] Add CVE-2023-6349/libvpx

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8751b782 by Salvatore Bonaccorso at 2024-05-27T22:39:55+02:00
Add CVE-2023-6349/libvpx

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -47,7 +47,9 @@ CVE-2024-27310 (Zoho ManageEngineADSelfService Plus versions below6401 are vulne
 CVE-2024-0851 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
 	TODO: check
 CVE-2023-6349 (A heap overflow vulnerability exists in libvpx -Encoding a frame that  ...)
-	TODO: check
+	- libvpx 1.13.1-2
+	NOTE: https://bugs.chromium.org/p/webm/issues/detail?id=1642
+	NOTE: https://chromium.googlesource.com/webm/libvpx/+/df9fd9d5b7325060b2b921558a1eb20ca7880937 (v1.13.1)
 CVE-2023-50977 (In GNOME Shell through 45.2, unauthenticated remote code execution can ...)
 	TODO: check
 CVE-2022-4969 (A vulnerability, which was classified as critical, has been found in b ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8751b782ff8ca6e23bad23a8bc31e8e84bd41fe0

-- 
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8751b782ff8ca6e23bad23a8bc31e8e84bd41fe0
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240527/0c1077fc/attachment.htm>