[Git][security-tracker-team/security-tracker][master] libsndfile fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cd5a5bc6 by Moritz Muehlenhoff at 2024-12-14T14:42:12+01:00
libsndfile fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -14634,8 +14634,8 @@ CVE-2024-50613 (libsndfile through 1.2.2 has a reachable assertion, that may lea
 	[bullseye] - libsndfile <postponed> (Minor issue, revisit when fixed upstream)
 	NOTE: https://github.com/libsndfile/libsndfile/issues/1034
 CVE-2024-50612 (libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out ...)
-	- libsndfile <unfixed> (bug #1088692)
-	[bookworm] - libsndfile <postponed> (Minor issue, revisit when fixed upstream)
+	- libsndfile 1.2.2-2 (bug #1088692)
+	[bookworm] - libsndfile <no-dsa> (Minor issue)
 	[bullseye] - libsndfile <postponed> (Minor issue, CLI DoS)
 	NOTE: https://github.com/libsndfile/libsndfile/issues/1035
 	NOTE: Fixed by: https://github.com/libsndfile/libsndfile/commit/4755f5bd7854611d92ad0f1295587b439f9950ba
@@ -206585,7 +206585,7 @@ CVE-2022-33067 (Lrzip v0.651 was discovered to contain multiple invalid arithmet
 CVE-2022-33066
 	RESERVED
 CVE-2022-33065 (Multiple signed integers overflow in function au_read_header in src/au ...)
-	- libsndfile <unfixed> (bug #1051891)
+	- libsndfile 1.2.2-2 (bug #1051891)
 	[bookworm] - libsndfile <no-dsa> (Minor issue)
 	[bullseye] - libsndfile <no-dsa> (Minor issue)
 	[buster] - libsndfile <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd5a5bc6b9c2a21ed634c0c3a7fafb4e787408fa

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd5a5bc6b9c2a21ed634c0c3a7fafb4e787408fa
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241214/ad9ab04e/attachment.htm>