Bug#1014783: faust: CVE-2021-41736 CVE-2021-41737

[Moritz Mühlenhoff <jmm@inutil.org>]

Source: faust
X-Debbugs-CC: team@security.debian.org
Severity: normal
Tags: security

Hi,

The following vulnerabilities were published for faust.

CVE-2021-41736[0]:
| Faust v2.35.0 was discovered to contain a heap-buffer overflow in the
| function realPropagate() at propagate.cpp.

https://github.com/grame-cncm/faust/issues/653

CVE-2021-41737[1]:
No description was found (try on a search engine)

https://github.com/grame-cncm/faust/issues/653

If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2021-41736
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41736
[1] https://security-tracker.debian.org/tracker/CVE-2021-41737
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41737

Please adjust the affected versions in the BTS as needed.