[Git][security-tracker-team/security-tracker][master] Update references for CVE-2026-18497

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b5e25583 by Salvatore Bonaccorso at 2026-08-31T20:51:51+02:00
Update references for CVE-2026-18497

While https://github.com/nothings/stb/issues/1962 looks in releated area
and might be a duplicate, CVE-2026-18497 is associated for
https://www.kb.cert.org/vuls/id/987105 and
https://github.com/nothings/stb/issues/1905 .

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -30044,9 +30044,9 @@ CVE-2026-19079 (A TOCTOU (Time-of-Check-Time-of-Use) race condition vulnerabilit
 	[trixie] - policycoreutils <no-dsa> (Minor issue)
 	NOTE: Fixed by: https://github.com/SELinuxProject/selinux/commit/a556538c2d5d2583273e025b45c02651fef47679
 CVE-2026-18497 (A heap-buffer-overflow vulnerability exists in the nothings stb TrueTy ...)
-	- libstb <undetermined>
-	NOTE: https://github.com/nothings/stb/issues/1962
-	TODO: check, missing upstream details
+	- libstb <unfixed>
+	NOTE: https://www.kb.cert.org/vuls/id/987105
+	NOTE: https://github.com/nothings/stb/issues/1905
 CVE-2026-17603 (Nexus Repository 3 did not sufficiently restrict which HikariCP connec ...)
 	NOT-FOR-US: Sonatype
 CVE-2026-17601 (A user holding a permission to update privilege definitions could modi ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b5e25583961d1b704ccd06ffa4816350c9e935c4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b5e25583961d1b704ccd06ffa4816350c9e935c4
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260831/9ed3d5ae/attachment.htm>