Thorsten Alteholz pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2cd6585b by Thorsten Alteholz at 2021-10-24T17:31:59+02:00
faad2 issues fixed in recent upload
- - - - -
f2693817 by Thorsten Alteholz at 2021-10-24T17:33:05+02:00
Reserve DLA-2792-1 for faad2
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -176633,7 +176633,6 @@ CVE-2019-6956 (An issue was discovered in Freeware
Advanced Audio Decoder 2 (FAA
{DLA-1899-1}
- faad2 2.8.8-3.1 (bug #914641)
[buster] - faad2 <no-dsa> (Minor issue)
- [stretch] - faad2 <no-dsa> (Minor issue)
NOTE: https://sourceforge.net/p/faac/bugs/240/
NOTE: https://github.com/knik0/faad2/issues/39
NOTE:
https://github.com/knik0/faad2/commit/6823e6610c9af1b0080cb22b9da03efb208d7d57
@@ -186134,7 +186133,6 @@ CVE-2018-20360 (An invalid memory address dereference
was discovered in the sbr_
{DLA-1899-1}
- faad2 2.8.8-3.1 (low)
[buster] - faad2 <no-dsa> (Minor issue)
- [stretch] - faad2 <no-dsa> (Minor issue)
NOTE: https://github.com/knik0/faad2/issues/32
NOTE:
https://github.com/knik0/faad2/commit/3b80a57483a6bc822d3ce3cc640fa81737a87c54
CVE-2018-20359 (An invalid memory address dereference was discovered in the
sbrDecodeS ...)
@@ -186742,7 +186740,6 @@ CVE-2018-20199 (A NULL pointer dereference was
discovered in ifilter_bank of lib
{DLA-1899-1}
- faad2 2.8.8-3.1 (low)
[buster] - faad2 <no-dsa> (Minor issue)
- [stretch] - faad2 <no-dsa> (Minor issue)
NOTE: https://github.com/knik0/faad2/issues/24
NOTE:
https://github.com/knik0/faad2/commit/3b80a57483a6bc822d3ce3cc640fa81737a87c54
CVE-2018-20198 (A NULL pointer dereference was discovered in ifilter_bank of
libfaad/f ...)
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[24 Oct 2021] DLA-2792-1 faad2 - security update
+ {CVE-2018-20199 CVE-2018-20360 CVE-2019-6956 CVE-2021-32274
CVE-2021-32276 CVE-2021-32277 CVE-2021-32278}
+ [stretch] - faad2 2.8.0~cvs20161113-1+deb9u3
[23 Oct 2021] DLA-2791-1 mailman - security update
{CVE-2021-42096 CVE-2021-42097}
[stretch] - mailman 1:2.1.23-1+deb9u7
=====================================
data/dla-needed.txt
=====================================
@@ -32,9 +32,6 @@ debian-archive-keyring
exiv2 (Thorsten Alteholz)
NOTE: 20211010: WIP, also taking care of older issues
--
-faad2 (Thorsten Alteholz)
- NOTE: 20211010: WIP, also taking care of older issues
---
ffmpeg (Anton Gladky)
NOTE: probably wait until stuff is fixed in Buster
NOTE: 20211010: WIP https://salsa.debian.org/lts-team/packages/ffmpeg
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/686fd0989e8e6fb615d2d6e2cbb677562777235c...f2693817d87b649c9a6e492ca0cb181c3e71de5c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/686fd0989e8e6fb615d2d6e2cbb677562777235c...f2693817d87b649c9a6e492ca0cb181c3e71de5c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
