[Git][security-tracker-team/security-tracker][master] disassociate CVE-2023-43281 from stc:libstb and only keep the note

Moritz Muehlenhoff (@jmm) jmm at debian.org
Fri Sep 27 14:12:58 BST 2024



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1536d947 by Moritz Muehlenhoff at 2024-09-27T15:12:27+02:00
disassociate CVE-2023-43281 from stc:libstb and only keep the note

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -85340,9 +85340,6 @@ CVE-2023-44760 (Multiple Cross Site Scripting (XSS) vulnerabilities in Concrete
 CVE-2023-43358 (Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a  ...)
 	NOT-FOR-US: CMSmadesimple
 CVE-2023-43281 (Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remo ...)
-	- libstb <unfixed>
-	[bookworm] - libstb <no-dsa> (Minor issue)
-	[bullseye] - libstb <no-dsa> (Minor issue)
 	NOTE: Potentially a duplicate of CVE-2023-45664, but MITRE decided to not reject as
 	NOTE: a separate research done for each does not conclusively show that the vulnerabilities
 	NOTE: identified are the same. Instread a note is added that the CVEs might overlap.



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1536d947b0549153c33ee4ecf83b505b52a2e06d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1536d947b0549153c33ee4ecf83b505b52a2e06d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240927/f74b7cc1/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list