[Git][security-tracker-team/security-tracker][master] CVE-2018-13139/libsndfile is fixed as well with 1.0.28-5 upload
Salvatore Bonaccorso
carnil at debian.org
Wed Sep 18 09:44:00 BST 2019
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
14f57db0 by Salvatore Bonaccorso at 2019-09-18T08:43:21Z
CVE-2018-13139/libsndfile is fixed as well with 1.0.28-5 upload
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -63247,7 +63247,7 @@ CVE-2018-13140 (Druide Antidote through 9.5.1 on Windows and Linux allows remote
NOT-FOR-US: Druide Antidote
CVE-2018-13139 (A stack-based buffer overflow in psf_memset in common.c in libsndfile ...)
{DLA-1618-1}
- - libsndfile <unfixed> (unimportant)
+ - libsndfile 1.0.28-5 (unimportant)
NOTE: https://github.com/erikd/libsndfile/issues/397
NOTE: https://github.com/erikd/libsndfile/commit/aaea680337267bfb6d2544da878890ee7f1c5077
NOTE: Missing channel number check in sndfile-deinterleave program, not a
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/14f57db0f82b0648046a91e49d9e920d5c8edbce
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/14f57db0f82b0648046a91e49d9e920d5c8edbce
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190918/de21769e/attachment.html>
More information about the debian-security-tracker-commits
mailing list