This only affected Focal, the later releases include the second commit
already.
** Changed in: mpg123 (Ubuntu Jammy)
Status: New => Fix Released
** Changed in: mpg123 (Ubuntu Noble)
Status: New => Fix Released
** Changed in: mpg123 (Ubuntu Oracular)
Status: New => Fix Released
** Changed in: mpg123 (Ubuntu Plucky)
Status: New => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to mpg123 in Ubuntu.
https://bugs.launchpad.net/bugs/2089680
Title:
Insufficient fix for CVE-2024-10573
Status in mpg123 package in Ubuntu:
Fix Released
Status in mpg123 source package in Focal:
Confirmed
Status in mpg123 source package in Jammy:
Fix Released
Status in mpg123 source package in Noble:
Fix Released
Status in mpg123 source package in Oracular:
Fix Released
Status in mpg123 source package in Plucky:
Fix Released
Bug description:
The fix for CVE-2024-10573 is insufficient in certain releases,
pending investigation. This is the tracking bug.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mpg123/+bug/2089680/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
