Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
cd5a5bc6 by Moritz Muehlenhoff at 2024-12-14T14:42:12+01:00
libsndfile fixed in sid
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -14634,8 +14634,8 @@ CVE-2024-50613 (libsndfile through 1.2.2 has a
reachable assertion, that may lea
[bullseye] - libsndfile <postponed> (Minor issue, revisit when fixed
upstream)
NOTE: https://github.com/libsndfile/libsndfile/issues/1034
CVE-2024-50612 (libsndfile through 1.2.2 has an ogg_vorbis.c
vorbis_analysis_wrote out ...)
- - libsndfile <unfixed> (bug #1088692)
- [bookworm] - libsndfile <postponed> (Minor issue, revisit when fixed
upstream)
+ - libsndfile 1.2.2-2 (bug #1088692)
+ [bookworm] - libsndfile <no-dsa> (Minor issue)
[bullseye] - libsndfile <postponed> (Minor issue, CLI DoS)
NOTE: https://github.com/libsndfile/libsndfile/issues/1035
NOTE: Fixed by:
https://github.com/libsndfile/libsndfile/commit/4755f5bd7854611d92ad0f1295587b439f9950ba
@@ -206585,7 +206585,7 @@ CVE-2022-33067 (Lrzip v0.651 was discovered to
contain multiple invalid arithmet
CVE-2022-33066
RESERVED
CVE-2022-33065 (Multiple signed integers overflow in function au_read_header
in src/au ...)
- - libsndfile <unfixed> (bug #1051891)
+ - libsndfile 1.2.2-2 (bug #1051891)
[bookworm] - libsndfile <no-dsa> (Minor issue)
[bullseye] - libsndfile <no-dsa> (Minor issue)
[buster] - libsndfile <no-dsa> (Minor issue)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd5a5bc6b9c2a21ed634c0c3a7fafb4e787408fa
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd5a5bc6b9c2a21ed634c0c3a7fafb4e787408fa
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
