Bug#926125: libmysofa: CVE-2019-10672

[Salvatore Bonaccorso]

Source: libmysofa
Version: 0.6~dfsg0-2
Severity: grave
Tags: security upstream

Hi,

The following vulnerability was published for libmysofa.

CVE-2019-10672[0]:
| treeRead in hdf/btree.c in libmysofa before 0.7 does not properly
| validate multiplications and additions.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2019-10672
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10672
[1] https://github.com/hoene/libmysofa/commit/d39a171e9c6a1c44dbdf43f9db6c3fbd887e38c1

Regards,
Salvatore