[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Update lame entry in data/dla-needed.

[Hugo Lefeuvre]

Hugo Lefeuvre pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5e396f11 by Hugo Lefeuvre at 2018-01-18T17:42:52+01:00
Update lame entry in data/dla-needed.

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
--- a/data/dla-needed.txt
+++ b/data/dla-needed.txt
@@ -27,9 +27,7 @@ isc-dhcp
 --
 lame (Hugo Lefeuvre)
   NOTE: Couldn't reproduce CVE-2017-{69-72}, but successfully reproduced CVE-2017-150{18,45,46}
-  NOTE: 20171120: Backporting 3.100 is not conceivable, diff >40k lines.
-  NOTE: Instead, lame's maintainer will switch jessie to also use libsndfile in the next Jessie
-  NOTE: point update, simply forward the changes to Wheezy (this should fix almost all open CVEs).
+  NOTE: 20180118: Fabian showed interest in porting lame to libsndfile, but probably didn't have time until now. Just pinged him.
 --
 libav (Hugo Lefeuvre)
   NOTE: 20171116: Diego Biurrun (from the libav team) is working on patches.



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5e396f113ebd10b2a2d1014b5a45d92992712283

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5e396f113ebd10b2a2d1014b5a45d92992712283
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180118/99a46433/attachment-0001.html>