[Bug 227669] audio/libsndfile: vulnerabilities < 1.0.29 still not fixed

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=227669

Thomas Zander <riggs at FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|New                         |Open
              Flags|maintainer-feedback?(multim |maintainer-feedback+
                   |edia at FreeBSD.org)           |
                 CC|                            |riggs at FreeBSD.org

--- Comment #1 from Thomas Zander <riggs at FreeBSD.org> ---
Checking the upstream issue reports for

https://github.com/erikd/libsndfile/issues/317
https://github.com/erikd/libsndfile/issues/344

These issues have not been addressed upstream, it seems, and there has been no
newer release of libsndfile.

At the moment this is an unsolved issue for everyone. For example, debian also
reports unfixed:
https://security-tracker.debian.org/tracker/CVE-2017-17456

-- 
You are receiving this mail because:
You are the assignee for the bug.