[Git][security-tracker-team/security-tracker][master] 4 commits: Add embeds of/in packages I maintain.
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat May 2 14:59:53 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
a292e7b8 by Andrius Merkys at 2026-04-29T02:23:29-04:00
Add embeds of/in packages I maintain.
- - - - -
78e247af by Andrius Merkys at 2026-04-29T02:25:13-04:00
Merge branch 'master' into embedded-code-copies-games-multimedia
- - - - -
96175bf4 by Andrius Merkys at 2026-04-29T03:16:45-04:00
vst3sdk unembed from juce has bug report.
- - - - -
8c2d49ab by Salvatore Bonaccorso at 2026-05-02T15:59:51+02:00
Merge branch 'embedded-code-copies-games-multimedia' into 'master'
embedded-code-copies: embeds in games and multimedia teams
See merge request security-tracker-team/security-tracker!288
- - - - -
1 changed file:
- data/embedded-code-copies
Changes:
=====================================
data/embedded-code-copies
=====================================
@@ -3607,6 +3607,7 @@ libstb
- sumo 1.24.0+dfsg2-1 (embed; bug #950251)
- yquake2 <unfixed> (embed; bug #950252)
- dart <unfixed> (modified-embed)
+ - raylib <unfixed> (embed)
http-parser
- nodejs <unfixed> (embed)
@@ -3925,6 +3926,7 @@ dr_flac (not packaged in Debian)
- libsdl2-mixer <not-affected> (embed)
NOTE: libsdl2-mixer embedds vulnerable code in dr_flac, but is compiled with coded
NOTE: disabled via --enable-music-flac-libflac --disable-music-flac-drflac
+ - raylib <unfixed> (embed)
libcrypto++
- cryfs 0.11.4-5 (modified-embed; bug #1108008)
@@ -3946,3 +3948,14 @@ picohttpparser (itp: #1132124)
- identity4c <unfixed> (embed)
- libhttp-parser-xs-perl <unfixed> (embed)
- monitoring-plugins <unfixed> (embed)
+
+vst3sdk
+ - ardour <unfixed> (embed)
+ - juce <unfixed> (embed; bug #1135201)
+ - qtractor <unfixed> (embed)
+
+rapidjson
+ - vst3sdk <unfixed> (modified-embed)
+
+nanovg
+ - bespokesynth <unfixed> (embed)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/1fd378c06736f1df3a8f99e54656ba73be740c76...8c2d49ab9b526a5d8a33ee0d03285044e19eea9a
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/1fd378c06736f1df3a8f99e54656ba73be740c76...8c2d49ab9b526a5d8a33ee0d03285044e19eea9a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260502/c2a996cb/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list