Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e859c637 by Salvatore Bonaccorso at 2023-10-31T07:33:03+01:00
Track three fixes which landed in wabt/1.0.33 upstream
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -22010,8 +22010,9 @@ CVE-2023-31860 (Wuzhi CMS v3.1.2 has a storage type XSS
vulnerability in the bac
CVE-2023-31752 (SourceCodester Employee and Visitor Gate Pass Logging System
v1.0 is v ...)
NOT-FOR-US: SourceCodester Employee and Visitor Gate Pass Logging System
CVE-2023-31669 (WebAssembly wat2wasm v1.0.32 allows attackers to cause a
libc++abi.dyl ...)
- - wabt <unfixed> (unimportant)
+ - wabt 1.0.33-1 (unimportant)
NOTE: https://github.com/WebAssembly/wabt/issues/2165
+ NOTE: https://github.com/WebAssembly/wabt/pull/2166
NOTE: Crash in CLI tool, no security impact
CVE-2023-31518 (A heap use-after-free in the component
CDataFileReader::GetItem of tee ...)
- teeworlds <unfixed> (bug #1036703)
@@ -26908,7 +26909,7 @@ CVE-2023-30302
CVE-2023-30301
RESERVED
CVE-2023-30300 (An issue in the component hang.wasm of WebAssembly 1.0 causes
an infin ...)
- - wabt <unfixed> (unimportant; bug #1035686)
+ - wabt 1.0.33-1 (unimportant; bug #1035686)
NOTE: https://github.com/WebAssembly/wabt/issues/2180
NOTE: https://github.com/WebAssembly/wabt/pull/2183
NOTE:
https://github.com/WebAssembly/wabt/commit/2d77bda4034a719fe1a2eaf1d51593eb351ecb4c
@@ -36936,7 +36937,7 @@ CVE-2023-27117 (WebAssembly v1.0.29 was discovered to
contain a heap overflow vi
NOTE: Crash in CLI tool, no security impact
NOTE: https://github.com/WebAssembly/wabt/issues/1989
CVE-2023-27116 (WebAssembly v1.0.29 discovered to contain an abort in
CWriter::MangleT ...)
- - wabt <unfixed> (unimportant; bug #1032669)
+ - wabt 1.0.33-1 (unimportant; bug #1032669)
NOTE: Crash in CLI tool, no security impact
NOTE: https://github.com/WebAssembly/wabt/issues/1984
NOTE: https://github.com/WebAssembly/wabt/pull/2119
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e859c637008854a29a0c45f769388c3a23d3900f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e859c637008854a29a0c45f769388c3a23d3900f
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
