Control: reopen -1
Control: found -1 12.2.0-1

Hi Robert,

While looking for updates to be done for the security-tracker I
noticed that #946657 was closed:

On Sun, Dec 22, 2019 at 05:09:09PM +0000, Debian Bug Tracking System wrote:
>  sysstat (12.2.0-1) unstable; urgency=medium
>  .
>    * New upstream stable version:
>      + fixes double free in check_file_actlst in check_file_actlst in
>        sa_common.c (CVE-2019-19725, closes: #946657).

But this is not actually true I believe.
https://github.com/sysstat/sysstat/commit/a5c8abd4a481ee6e27a3acf00e6d9b0f023e20ed
is not applied in 12.2.0-1, and I do not see it applied as patch as
well.

Regards,
Salvatore

Reply via email to