-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 31 Jan 2023 22:02:19 +0200 Source: libstb Architecture: source Version: 0.0~git20180212.15.e6afb9c-1+deb10u1 Distribution: buster-security Urgency: medium Maintainer: Yangfl <mmyangfl@gmail.com> Changed-By: Adrian Bunk <bunk@debian.org> Changes: libstb (0.0~git20180212.15.e6afb9c-1+deb10u1) buster-security; urgency=medium . * Non-maintainer upload by the LTS team. * CVE-2018-16981: Heap-based buffer overflow in stbi__out_gif_code(). * CVE-2019-13217: Heap buffer overflow in the Vorbis start_decoder(). * CVE-2019-13218: Division by zero in the Vorbis predict_point(). * CVE-2019-13219: NULL pointer dereference in the Vorbis get_window(). * CVE-2019-13220: Uninitialized stack variables in the Vorbis start_decoder(). * CVE-2019-13221: Buffer overflow in the Vorbis compute_codewords(). * CVE-2019-13222: Out-of-bounds read of a global buffer in the Vorbis draw_line(). * CVE-2019-13223: Reachable assertion in the Vorbis lookup1_values(). * CVE-2021-28021: Buffer overflow in stbi__extend_receive(). * CVE-2021-37789: Heap-based buffer overflow in stbi__jpeg_load(). * CVE-2021-42715: The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. * CVE-2022-28041: Integer overflow in stbi__jpeg_decode_block_prog_dc(). * CVE-2022-28042: Heap-based use-after-free in stbi__jpeg_huff_decode(). Checksums-Sha1: 5b67bd09bec77f2aff71b281c7d3bd9696b71b0d 2033 libstb_0.0~git20180212.15.e6afb9c-1+deb10u1.dsc c9623a4569783da9bc9e649a63052f7f2bc869a6 1326637 libstb_0.0~git20180212.15.e6afb9c.orig.tar.gz bd6fc7269e0b060a961d0d1facc38fa6ccfce11d 14304 libstb_0.0~git20180212.15.e6afb9c-1+deb10u1.debian.tar.xz Checksums-Sha256: 3fd7c442f236c81502224e0579a081f6fd920c41abfc68813e0e10cf8d439ad2 2033 libstb_0.0~git20180212.15.e6afb9c-1+deb10u1.dsc b9bef733704658e78239b156550066cd4253a5fa1b4cbf09a1a2a39f3f3ceb3a 1326637 libstb_0.0~git20180212.15.e6afb9c.orig.tar.gz f6e9ee110ce2445e2c18f1b9e61920e896c1f2d1edbd712230341fee5173ff36 14304 libstb_0.0~git20180212.15.e6afb9c-1+deb10u1.debian.tar.xz Files: 0db5eebc049de1b701161f9000786cdf 2033 libs optional libstb_0.0~git20180212.15.e6afb9c-1+deb10u1.dsc fd60dac95c93b25abfee43ae7db6b99e 1326637 libs optional libstb_0.0~git20180212.15.e6afb9c.orig.tar.gz 19b20d695ebf90477e6e21e68c9797b6 14304 libs optional libstb_0.0~git20180212.15.e6afb9c-1+deb10u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmPZglwACgkQiNJCh6LY mLEs1Q/9EW0VGSYeHFXAdsdrvKVt3SmvRzTt8Nz33U0rTD1T5f6tzM197on/B2tX 2GDbNsIRDdVDRHvF8iPZ33/VZ9/Hb3o7VGv1zxzoAIbQ1DCiKXskoDGzD3mxny5m KSvmSGPfTXBIoz9eeY0K2KVMYjqzLGOhn976Rm4bHoFTRKISnpzB466MgU+aI3JU DwDI8V827YjpNEzTgGKEkDS0ysytzX+5ao+bY6Ui6sfym9F2qB3ZKWYAeG6gKdqL lb9XCfA5x07UXO4fX6fErNjxfLeCpNbd2tjE4o4jIBebhBBenHo2hkpla/DFb++p rctBpG2HjpCY+PGQmaflpkdI/7kaPTH0p7cE5O31cx0aj+3KQoJpnXqp1FJPvZoM 5mRrPSAc+dKouE6jmCZpRDIqLVGIhzEXUC4bEqMWn7vpe3kySj5EA2+34IJfZMrE 4tsSKYFOiXikbkZagdlfw7QACpSizwP26aROXQnFXCTyBY7c1jV8/XwEeo48Lf1m zbZCn9XGXXcpKKZCzDesFLUiTIa2qiQ15keSROigmO1XD+1a8kwm64svedQrjrxi BercrkefcGuEPDxr9kJiHtyjj1FPvmguXVRC/S6yau+2YgQWPte95O6Kbc2hSoAO 4cAVrZcZG7ppnN/3ogkID7/H98hWrah/Cttxm0pw3QoUL93z4yc= =beC3 -----END PGP SIGNATURE-----