Alerts This Week
Warning Icon 1 1,146
Alerts This Week
Warning Icon 1 1,146

Gentoo: GLSA-202409-15 Normal: stb Multiple Issues Denial of Service

gentoo
Calendar Grey September 22, 2024
Dist Gentoo Esm H88
Uncover various vulnerabilities within stb that impact Gentoo systems. A recommended update has been issued for moderate severity flaws.
Multiple vulnerabilities have been discovered in stb, the worst of which lead to a denial of service.

Summary

Multiple vulnerabilities have been discovered in stb. Please review the CVE identifiers referenced below for details.

Topics%20covered

Topics Covered

security advisory denial of service Gentoo multiple issues normal severity stb

Resolution

All stb users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/stb-20240201"
Note that stb is included at compile time, so all packages that depend on it should also be reinstalled. If you have app-portage/gentoolkit installed you can use:
# emerge --ask --verbose $( equery depends dev-libs/stb | sed 's/^/=/' )

References

[ 1 ] CVE-2021-28021 https://nvd.nist.gov/vuln/detail/CVE-2021-28021 [ 2 ] CVE-2021-37789 https://nvd.nist.gov/vuln/detail/CVE-2021-37789 [ 3 ] CVE-2021-42715 https://nvd.nist.gov/vuln/detail/CVE-2021-42715 [ 4 ] CVE-2021-42716 https://nvd.nist.gov/vuln/detail/CVE-2021-42716 [ 5 ] CVE-2022-28041 https://nvd.nist.gov/vuln/detail/CVE-2022-28041 [ 6 ] CVE-2022-28042 https://nvd.nist.gov/vuln/detail/CVE-2022-28042 [ 7 ] CVE-2022-28048 https://nvd.nist.gov/vuln/detail/CVE-2022-28048

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
https://security.gentoo.org/glsa/202409-15
style>.gentoo_availability{display:block;}

Concerns

Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.

Severity: Normal
Title: stb: Multiple Vulnerabilities
Date: September 22, 2024
Bugs: #818556
ID: 202409-15

Topics%20covered

Topics Covered

security advisory denial of service Gentoo multiple issues normal severity stb

Synopsis

Multiple vulnerabilities have been discovered in stb, the worst of which lead to a denial of service.

Background

A set of single-file public domain (or MIT licensed) libraries for C/C++

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Package Vulnerable Unaffected ------------ ------------ ------------ dev-libs/stb < 20240201 >= 20240201

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Your message here