This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-22617 →

DEBIAN-CVE-2020-22617

Ardour v5.12 contains a use-after-free vulnerability in the component ardour/libs/pbd/xml++.cc when using xmlFreeDoc and xmlXPathFreeContext.

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Debian:12 ardour

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.0.0~ds0-1"}]}]

Debian:13 ardour

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.0.0~ds0-1"}]}]

Debian:14 ardour

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.0.0~ds0-1"}]}]