[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2017-18189/sox: #881121

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b2d3ac76 by Salvatore Bonaccorso at 2018-02-16T07:18:02+01:00
Add CVE-2017-18189/sox: #881121

The fix was done in 14.4.2-1 uploaded to experimental and the first
version in unstable containing the change thus 14.4.2-2 with the upload
to unstable.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -255,7 +255,10 @@ CVE-2018-7050 (An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.
 	NOTE: https://irssi.org/security/irssi_sa_2018_02.txt
 	NOTE: Fixed by: https://github.com/irssi/irssi/commit/e91da9e4098e449dc36eaa15354aff67650e7703
 CVE-2017-18189 (In the startread function in xa.c in Sound eXchange (SoX) through ...)
-	TODO: check
+	- sox 14.4.2-2 (bug #881121)
+	[stretch] - sox <no-dsa> (Minor issue)
+	[jessie] - sox <no-dsa> (Minor issue)
+	NOTE: https://public-inbox.org/sox-devel/20171109114554.16297-1-mans@mansr.com/raw
 CVE-2018-7049
 	RESERVED
 CVE-2018-7048



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/b2d3ac76d3370a0dc23579a9e8c39bb05bc0c0da

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/b2d3ac76d3370a0dc23579a9e8c39bb05bc0c0da
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180216/c46e2381/attachment-0001.html>