Jochen Sprickerhof pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
63ee77e2 by Jochen Sprickerhof at 2025-04-22T16:23:42+02:00
lts: CVE-2024-50613/libsndfile bullseye ingored not not-affected
Thanks to carnil for pointing out.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -56299,9 +56299,9 @@ CVE-2024-50613 (libsndfile through 1.2.2 has a
reachable assertion, that may lea
- libsndfile <unfixed> (bug #1088691)
[trixie] - libsndfile <postponed> (Minor issue, revisit when fixed
upstream)
[bookworm] - libsndfile <postponed> (Minor issue, revisit when fixed
upstream)
- [bullseye] - libsndfile <not-affected> (Vulnerable code not present)
+ [bullseye] - libsndfile <ignored> (Issue mp3 file handling which is not
compiled in)
NOTE: https://github.com/libsndfile/libsndfile/issues/1034
- NOTE: linked with lame since ef69444 1.1.0-1/bookworm
+ NOTE: linked with lame since
https://salsa.debian.org/multimedia-team/libsndfile/-/commit/ef69444
1.1.0-1/bookworm
CVE-2024-50612 (libsndfile through 1.2.2 has an ogg_vorbis.c
vorbis_analysis_wrote out ...)
- libsndfile 1.2.2-2 (bug #1088692)
[bookworm] - libsndfile <no-dsa> (Minor issue)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/63ee77e2c4704501f52089a7c67b7ad6a9815a6b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/63ee77e2c4704501f52089a7c67b7ad6a9815a6b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
