Bug#991370: libmatio: CVE-2020-36428

[Sébastien Villemot]

Le mercredi 30 mars 2022 à 21:08 +0200, Sébastien Villemot a écrit :
> > The OSV-2020-799.yaml cannot be taken into account because it was
> > marked as such as consequence of
> > https://github.com/google/oss-fuzz-vulns/issues/12 as far i can see.
> > Actually it looks that tbeu considers it invalid issue? If this turned
> > not to be true, what is the fix?
> 
> If upstream is wrong, then I have no idea what would be the fix.

I forgot to mention that tbeu is the upstream maintainer.

-- 
⢀⣴⠾⠻⢶⣦⠀  Sébastien Villemot
⣾⠁⢠⠒⠀⣿⡁  Debian Developer
⢿⡄⠘⠷⠚⠋⠀  https://sebastien.villemot.name
⠈⠳⣄⠀⠀⠀⠀  https://www.debian.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/debian-science-maintainers/attachments/20220330/538342bd/attachment.sig>