Bug#940647: buster-pu: package libmysofa/0.6~dfsg0-3
Control: tags -1 + confirmed
On Wed, 2019-09-18 at 14:42 +0200, IOhannes m zmoelnig wrote:
> the binary package libmysofa0 is used by VLC (the ubiquitous media
> player) and the ffmpeg framework (the ubiquitous media framework),
> and consequently has a popcon of 43382.
>
> The src:libmysofa package has been assigned a number of CVEs and a
> cumulative Debian bug #939735.
> The issues (NULL-pointer access, out-of-bound reads, invalid reads
> and writes) have been promptly fixed by upstream, who have released a
> new version (0.8).
>
Please go ahead. Sorry for the delay.
Regards,
Adam
Reply to: