Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a70bf6e2 by Salvatore Bonaccorso at 2019-01-16T18:19:40Z
Revert "data/CVE/list: Fix CVE-2018-19758 (libsndfile). Add fixed jessie
version."
This reverts commit 3d6e64efa657c91754604a29cfac0ebf3ce37bf1.
Reason: The issue was fixed in DLA-1632-1 and corrctly listed there to
build the cross reference. No need to add version tracking in
data/CVE/list but it was correct for readability to remove the no-dsa
tagged entry.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -12879,7 +12879,6 @@ CVE-2018-19758 (There is a heap-based buffer over-read
at wav.c in wav_write_hea
{DLA-1632-1}
- libsndfile <unfixed> (bug #917416)
[stretch] - libsndfile <no-dsa> (Minor issue)
- [jessie] - libsndfile 1.0.25-9.1+deb8u3
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1643812
NOTE: https://github.com/erikd/libsndfile/issues/435
NOTE:
https://github.com/erikd/libsndfile/commit/42132c543358cee9f7c3e9e9b15bb6c1063a608e
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/a70bf6e2215286ac96633f6745da0512f2d7b90f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/a70bf6e2215286ac96633f6745da0512f2d7b90f
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
