Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 26 Apr 2018 14:42:36 +0000
From:      bugzilla-noreply@freebsd.org
To:        multimedia@FreeBSD.org
Subject:   [Bug 227669] audio/libsndfile: vulnerabilities < 1.0.29 still not fixed
Message-ID:  <bug-227669-12827-EoUswZzrrl@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-227669-12827@https.bugs.freebsd.org/bugzilla/>
References:  <bug-227669-12827@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=227669

Thomas Zander <riggs@FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|New                         |Open
              Flags|maintainer-feedback?(multim |maintainer-feedback+
                   |edia@FreeBSD.org)           |
                 CC|                            |riggs@FreeBSD.org

--- Comment #1 from Thomas Zander <riggs@FreeBSD.org> ---
Checking the upstream issue reports for

https://github.com/erikd/libsndfile/issues/317
https://github.com/erikd/libsndfile/issues/344

These issues have not been addressed upstream, it seems, and there has been no
newer release of libsndfile.

At the moment this is an unsolved issue for everyone. For example, debian also
reports unfixed:
https://security-tracker.debian.org/tracker/CVE-2017-17456

-- 
You are receiving this mail because:
You are the assignee for the bug.


Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-227669-12827-EoUswZzrrl>