oss-sec mailing list archives

CVE Request: null ptr deref in lame v3.99.5


From: Brian Carpenter <brian.carpenter () gmail com>
Date: Thu, 26 Feb 2015 12:08:25 -0600

Bug reports:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777160
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777161

Fixed by Debian patch here:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775959

Tracker:
https://tracker.debian.org/news/672916

Issue appears to be fixed in the Debian repos and in the upstream source,
however, no upstream release has been made yet (3.99.5 is still available
for download on Sourceforge).

Current thread: