[Git][security-tracker-team/security-tracker][master] new libsndfile issues (probably dupes)

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6d8b7d67 by Moritz Muehlenhoff at 2018-11-30T16:45:27Z
new libsndfile issues (probably dupes)

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -248,9 +248,15 @@ CVE-2018-19664 (libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the ...
 CVE-2018-19663
 	RESERVED
 CVE-2018-19662 (An issue was discovered in libsndfile 1.0.28. There is a buffer ...)
-	TODO: check
+	- libsndfile <unfixed> (low)
+	[stretch] - libsndfile <no-dsa> (Minor issue)
+	NOTE: https://github.com/erikd/libsndfile/issues/429
+	NOTE: Probably a dupe of CVE-2017-17456/CVE-2017-17457
 CVE-2018-19661 (An issue was discovered in libsndfile 1.0.28. There is a buffer ...)
-	TODO: check
+	- libsndfile <unfixed> (low)
+	[stretch] - libsndfile <no-dsa> (Minor issue)
+	NOTE: https://github.com/erikd/libsndfile/issues/429
+	NOTE: Probably a dupe of CVE-2017-17456/CVE-2017-17457
 CVE-2018-19660
 	RESERVED
 CVE-2018-19659



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6d8b7d67f71d27ab67156ab5db3f5343192e55bd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6d8b7d67f71d27ab67156ab5db3f5343192e55bd
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181130/9c83c7a8/attachment.html>