[Git][security-tracker-team/security-tracker][master] Update libmatio status

[Adrian Bunk]

Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7d09d36d by Adrian Bunk at 2019-04-28T14:55:43Z
Update libmatio status

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -86,7 +86,13 @@ liblivemedia (Hugo Lefeuvre)
 libmatio (Adrian Bunk)
   NOTE: fairly high number of open issues. Not sure why we never had a look at them.
   NOTE: triage work needed, help security team for fixes if needed.
-  NOTE: 20190413: work ongoing
+  NOTE: 20190428: most patches can be applied after context adaption
+  NOTE: 20190428: all CVEs are from one fuzzing attempt
+  NOTE: 20190428: some CVE testcases pass on the unpatched version,
+  NOTE: 20190428: but since the fixes can be made applied the code
+  NOTE: 20190428: is likely vulnerable
+  NOTE: 20190428: some CVE testcases still fail after applying the fix,
+  NOTE: 20190428: older changes seem to also be required for them
 --
 libspring-security-2.0-java
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7d09d36dde25e6503a879196e6fdc26212cf198e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7d09d36dde25e6503a879196e6fdc26212cf198e
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190428/35d424c0/attachment-0001.html>