Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
59b73314 by Salvatore Bonaccorso at 2019-08-17T13:38:12Z
Add tracking bug for libstb issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6408,25 +6408,25 @@ CVE-2019-13224 (A use-after-free in onig_new_deluxe()
in regext.c in Oniguruma 6
[stretch] - libonig <no-dsa> (Minor issue)
NOTE:
https://github.com/kkos/oniguruma/commit/0f7f61ed1b7b697e283e37bd2d731d0bd57adb55
CVE-2019-13223 (A reachable assertion in the lookup1_values function in
stb_vorbis thr ...)
- - libstb <unfixed>
+ - libstb <unfixed> (bug #934966)
NOTE:
https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6
CVE-2019-13222 (An out-of-bounds read of a global buffer in the draw_line
function in ...)
- - libstb <unfixed>
+ - libstb <unfixed> (bug #934966)
NOTE:
https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6
CVE-2019-13221 (A stack buffer overflow in the compute_codewords function in
stb_vorbi ...)
- - libstb <unfixed>
+ - libstb <unfixed> (bug #934966)
NOTE:
https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6
CVE-2019-13220 (Use of uninitialized stack variables in the start_decoder
function in ...)
- - libstb <unfixed>
+ - libstb <unfixed> (bug #934966)
NOTE:
https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6
CVE-2019-13219 (A NULL pointer dereference in the get_window function in
stb_vorbis th ...)
- - libstb <unfixed>
+ - libstb <unfixed> (bug #934966)
NOTE:
https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6
CVE-2019-13218 (Division by zero in the predict_point function in stb_vorbis
through 2 ...)
- - libstb <unfixed>
+ - libstb <unfixed> (bug #934966)
NOTE:
https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6
CVE-2019-13217 (A heap buffer overflow in the start_decoder function in
stb_vorbis thr ...)
- - libstb <unfixed>
+ - libstb <unfixed> (bug #934966)
NOTE:
https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6
CVE-2019-13216
RESERVED
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/59b7331427da065d822bdfe5a294461be4011e93
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/59b7331427da065d822bdfe5a294461be4011e93
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
