Hugo Lefeuvre pushed to branch master at Debian Security Tracker / security-tracker
Commits: 2b8ac03e by Hugo Lefeuvre at 2019-02-11T18:07:34Z update faad2 entry - - - - - 1 changed file: - data/dla-needed.txt Changes: ===================================== data/dla-needed.txt ===================================== @@ -26,6 +26,10 @@ exiv2 (Thorsten Alteholz) -- faad2 (Hugo Lefeuvre) NOTE: 20190125: No known patch yet. Going to fix the most exploitable issues at first. + NOTE: CVE-2018-20362: started to work on a patch. At first this issue appears to be a + NOTE: small crasher but it appears to be a bad design issue, and many, many of the CVEs + NOTE: reported for faad2 might very well just be other consequences of this same root issue. + NOTE: This needs some more investigations. See upstream bug report. -- firmware-nonfree NOTE: needed by sponsors View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2b8ac03e6ba8b3d3b3a35d5c57faeb07f280597d -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2b8ac03e6ba8b3d3b3a35d5c57faeb07f280597d You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
