[Secure-testing-commits] r49220 - data
Jonas Meurer
mejo at moszumanska.debian.org
Sat Feb 25 16:57:59 UTC 2017
Author: mejo
Date: 2017-02-25 16:57:59 +0000 (Sat, 25 Feb 2017)
New Revision: 49220
Modified:
data/dla-needed.txt
Log:
update notes for mp3splt in dla-needed.txt
Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt 2017-02-25 15:51:58 UTC (rev 49219)
+++ data/dla-needed.txt 2017-02-25 16:57:59 UTC (rev 49220)
@@ -90,10 +90,12 @@
mcollective
--
mp3splt
- NOTE: 2017-02-23: No patch available. Reproducer doesn't work with Debian
- NOTE: packages (tested on Stretch, Jessie and Wheezy). See the comments at
+ NOTE: 2017-02-25: No patch available. Reproducer doesn't work with Debian
+ NOTE: packages (tested on Stretch, Jessie and Wheezy). It's claimed to
+ NOTE: work with build flag '-fsanitize=address', which I wasn't able to
+ NOTE: verify either. For more details, see the discussion at
NOTE: https://blogs.gentoo.org/ago/2017/01/29/mp3splt-invalid-free-in-free_options-options_manager-c/
- NOTE: for expected output with the reproducer. -- Jonas Meurer
+ NOTE: -- Jonas Meurer
--
mupdf
NOTE: added 2017-02-25, please give maintainer some time to respond
More information about the Secure-testing-commits
mailing list