[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2017-7697 has been fixed in recent upload

Thorsten Alteholz (@alteholz) alteholz at debian.org
Mon Dec 13 23:12:36 GMT 2021



Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d3d2a511 by Thorsten Alteholz at 2021-12-13T23:53:20+01:00
CVE-2017-7697 has been fixed in recent upload

- - - - -
723a4f8b by Thorsten Alteholz at 2021-12-14T00:12:22+01:00
Reserve DLA-2845-1 for libsamplerate

- - - - -


2 changed files:

- data/CVE/list
- data/DLA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -287811,7 +287811,6 @@ CVE-2017-7698 (A Use After Free in the pdf2swf part of swftools 0.9.2 and earlie
 	NOTE: Vulnerable code removed with the 0.9.2+dfs1-2 upload
 CVE-2017-7697 (In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_o ...)
 	- libsamplerate 0.1.9-1 (bug #860159)
-	[stretch] - libsamplerate <no-dsa> (Minor issue)
 	[jessie] - libsamplerate <no-dsa> (Minor issue)
 	[wheezy] - libsamplerate <no-dsa> (Minor issue)
 	NOTE: https://github.com/erikd/libsamplerate/issues/11


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[14 Dec 2021] DLA-2845-1 libsamplerate - security update
+	{CVE-2017-7697}
+	[stretch] - libsamplerate 0.1.8-8+deb9u1
 [13 Dec 2021] DLA-2844-1 privoxy - security update
 	{CVE-2021-44540 CVE-2021-44543}
 	[stretch] - privoxy 3.0.26-3+deb9u3



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/0f479661bdbbd3ce198d58c17e8bebfdbb4b9dc7...723a4f8bf129943888a97389c5140eae25800fb1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/0f479661bdbbd3ce198d58c17e8bebfdbb4b9dc7...723a4f8bf129943888a97389c5140eae25800fb1
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211213/7a263adb/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list