Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2ba45f82 by Moritz Muehlenhoff at 2023-12-30T20:55:56+01:00
libsass fixed in sid
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -81656,14 +81656,14 @@ CVE-2022-43359 (Gifdec commit
1dcbae19363597314f6623010cc80abad4e47f7c was disco
NOT-FOR-US: Gifdec
CVE-2022-43358 (Stack overflow vulnerability in ast_selectors.cpp: in function
Sass::C ...)
[experimental] - libsass 3.6.5+20231221-1
- - libsass <unfixed> (bug #1051895)
+ - libsass 3.6.5+20231221-2 (bug #1051895)
[bookworm] - libsass <no-dsa> (Minor issue)
[bullseye] - libsass <no-dsa> (Minor issue)
[buster] - libsass <no-dsa> (Minor issue)
NOTE: https://github.com/sass/libsass/issues/3178
CVE-2022-43357 (Stack overflow vulnerability in ast_selectors.cpp in function
Sass::Co ...)
[experimental] - libsass 3.6.5+20231221-1
- - libsass <unfixed> (bug #1051893)
+ - libsass 3.6.5+20231221-2 (bug #1051895)
[bookworm] - libsass <no-dsa> (Minor issue)
[bullseye] - libsass <no-dsa> (Minor issue)
[buster] - libsass <no-dsa> (Minor issue)
@@ -128882,7 +128882,7 @@ CVE-2022-26593 (Cross-site scripting (XSS)
vulnerability in the Asset module's a
NOT-FOR-US: Liferay
CVE-2022-26592 (Stack Overflow vulnerability in libsass 3.6.5 via the
CompoundSelector ...)
[experimental] - libsass 3.6.5+20231221-1
- - libsass <unfixed> (bug #1051894)
+ - libsass 3.6.5+20231221-2 (bug #1051895)
[bookworm] - libsass <no-dsa> (Minor issue)
[bullseye] - libsass <no-dsa> (Minor issue)
[buster] - libsass <no-dsa> (Minor issue)
@@ -297083,7 +297083,7 @@ CVE-2019-18797 (LibSass 3.6.1 has uncontrolled
recursion in Sass::Eval::operator
[buster] - libsass <no-dsa> (Minor issue)
[stretch] - libsass <no-dsa> (Minor issue)
NOTE: https://github.com/sass/libsass/issues/3000
- NOTE: Not considered a security issue be upstream
+ NOTE: Not considered a security issue by upstream
CVE-2019-18796 (The BASS Audio Library 2.4.14 under Windows is prone to a
BASS_StreamC ...)
NOT-FOR-US: BASS Audio Library
CVE-2019-18795 (The BASS Audio Library 2.4.14 under Windows is prone to a
BASS_StreamC ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2ba45f82ca092693196147790ef731923a437e66
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2ba45f82ca092693196147790ef731923a437e66
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
