Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d6a51dbe by Salvatore Bonaccorso at 2025-03-16T16:12:08+01:00
Update information for CVE-2024-56431/libtheora
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -26294,12 +26294,14 @@ CVE-2024-10903 (The Broken Link Checker WordPress
plugin before 2.4.2 does not v
CVE-2024-8950 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
NOT-FOR-US: Arne Informatics Piramit Automation
CVE-2024-56431 (oc_huff_tree_unpack in huffdec.c in libtheora in Theora
through 1.0 71 ...)
- - libtheora <unfixed> (bug #1091633)
+ - libtheora 1.2.0~alpha1+dfsg-6 (bug #1091633)
[bookworm] - libtheora <no-dsa> (Minor issue)
[bullseye] - libtheora <postponed> (Minor issue, UBSAN, no patch)
NOTE: https://github.com/UnionTech-Software/libtheora-CVE-2024-56431-PoC
NOTE: https://github.com/advisories/GHSA-8xp8-gmmj-xc8w
NOTE: https://github.com/xiph/theora/issues/18
+ NOTE: https://gitlab.xiph.org/xiph/theora/-/merge_requests/28
+ NOTE: Fixed by:
https://gitlab.xiph.org/xiph/theora/-/commit/5665f86b8fd8345bb09469990e79221562ac204b
(v1.2.0beta1)
CVE-2024-56430 (OpenFHE through 1.2.3 has a NULL pointer dereference in
BinFHEContext: ...)
NOT-FOR-US: OpenFHE
CVE-2024-53291 (Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of
Sensiti ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d6a51dbecca6ae3edbfa479d797e8b5000c95e09
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d6a51dbecca6ae3edbfa479d797e8b5000c95e09
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
