Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8183e069 by Salvatore Bonaccorso at 2019-08-17T13:36:25Z
Add tracking of libstb itself for CVE-2018-16981/libstb
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -49137,7 +49137,9 @@ CVE-2018-16982 (Open Chinese Convert (OpenCC) 1.0.5
allows attackers to cause a
NOT-FOR-US: Open Chinese Convert (OpenCC)
CVE-2018-16981 (stb stb_image.h 2.19, as used in catimg, Emscripten, and other
product ...)
- catimg <undetermined>
+ - libstb 0.0~git20190617.5.c72a95d-1
NOTE: https://github.com/nothings/stb/issues/656
+ NOTE:
https://github.com/nothings/stb/commit/50b1bfba583b12ceb23ef949567bdd914461e524
TODO: further check, stb_image.h in older version is embedded in
src:catimg
CVE-2018-16980 (dotCMS V5.0.1 has XSS in the
/html/portlet/ext/contentlet/image_tools/ ...)
NOT-FOR-US: dotCMS
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/8183e069e43673f6ff1e8807d1fb9e863b4be24a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/8183e069e43673f6ff1e8807d1fb9e863b4be24a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
