Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
32858254 by Moritz Muehlenhoff at 2019-01-21T16:52:34Z
pdns-recursor fixed
libpng non-issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -931,10 +931,10 @@ CVE-2019-6130 (Artifex MuPDF 1.14.0 has a SEGV in the
function fz_load_page of t
NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=700446
NOTE:
http://www.ghostscript.com/cgi-bin/findgit.cgi?faf47b94e24314d74907f3f6bc874105f2c962ed
CVE-2019-6129 (png_create_info_struct in png.c in libpng 1.6.36 has a memory
leak, as ...)
- - libpng1.6 <unfixed> (low)
- [stretch] - libpng1.6 <no-dsa> (Minor issue)
+ - libpng1.6 <unfixed> (unimportant)
- libpng <removed>
NOTE: https://github.com/glennrp/libpng/issues/269
+ NOTE: Memory leak in CLI tool, no security impact
CVE-2019-6128 (The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a
memory ...)
- tiff <unfixed>
- tiff3 <removed>
@@ -5819,13 +5819,13 @@ CVE-2019-3808
RESERVED
CVE-2019-3807 [pdns-recursor: DNSSEC validation is not performed for AA
responses]
RESERVED
- - pdns-recursor <unfixed>
+ - pdns-recursor 4.1.9-1
[stretch] - pdns-recursor <not-affected> (Only affects 4.1.x)
[jessie] - pdns-recursor <not-affected> (Only affects 4.1.x)
NOTE:
https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2019-02.html
CVE-2019-3806 [pdns-recursor: Lua hooks are not called over TCP]
RESERVED
- - pdns-recursor <unfixed>
+ - pdns-recursor 4.1.9-1
[stretch] - pdns-recursor <not-affected> (Only affects 4.1.x)
[jessie] - pdns-recursor <not-affected> (Only affects 4.1.x)
NOTE:
https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2019-01.html
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/3285825446d19a36ec0e1a8d01c3ce4f14dba934
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/3285825446d19a36ec0e1a8d01c3ce4f14dba934
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
