Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker
Commits: 7d09d36d by Adrian Bunk at 2019-04-28T14:55:43Z Update libmatio status - - - - - 1 changed file: - data/dla-needed.txt Changes: ===================================== data/dla-needed.txt ===================================== @@ -86,7 +86,13 @@ liblivemedia (Hugo Lefeuvre) libmatio (Adrian Bunk) NOTE: fairly high number of open issues. Not sure why we never had a look at them. NOTE: triage work needed, help security team for fixes if needed. - NOTE: 20190413: work ongoing + NOTE: 20190428: most patches can be applied after context adaption + NOTE: 20190428: all CVEs are from one fuzzing attempt + NOTE: 20190428: some CVE testcases pass on the unpatched version, + NOTE: 20190428: but since the fixes can be made applied the code + NOTE: 20190428: is likely vulnerable + NOTE: 20190428: some CVE testcases still fail after applying the fix, + NOTE: 20190428: older changes seem to also be required for them -- libspring-security-2.0-java -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7d09d36dde25e6503a879196e6fdc26212cf198e -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7d09d36dde25e6503a879196e6fdc26212cf198e You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
