Thorsten Alteholz pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
598a8848 by Thorsten Alteholz at 2019-03-24T21:59:08Z
add bash
- - - - -
36e30f8e by Thorsten Alteholz at 2019-03-24T22:03:41Z
mark CVE-2018-5360 as no-dsa for tiff
- - - - -
40f60f98 by Thorsten Alteholz at 2019-03-24T22:05:07Z
add and claim neutron
- - - - -
e326bc80 by Thorsten Alteholz at 2019-03-24T22:05:55Z
add ghostscript
- - - - -
316b130e by Thorsten Alteholz at 2019-03-24T22:06:57Z
add putty
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -64918,6 +64918,7 @@ CVE-2018-5361 (The WPGlobus plugin 1.9.6 for WordPress
has CSRF via wp-admin/opt
NOT-FOR-US: WPGlobus plugin for WordPress
CVE-2018-5360 (LibTIFF before 4.0.6 mishandles the reading of TIFF files, as
demonstr ...)
- tiff 4.0.6-3
+ [jessie] - tiff <no-dsa> (Minor issue, duplicate of CVE-2014-8127)
- tiff3 <undetermined>
[wheezy] - tiff3 <postponed> (Minor issue, revisit once fixed upstream)
NOTE: Issue demostrated in tiff via a vector through graphicsmagick, cf.
=====================================
data/dla-needed.txt
=====================================
@@ -9,6 +9,8 @@ To pick an issue, simply add your name behind it. To learn more
about how
this list is updated have a look at
https://wiki.debian.org/LTS/Development#Triage_new_security_issues
+--
+bash
--
checkstyle (Adrian Bunk)
NOTE: CVE-2019-9658: changes appear to involve compatibility breakage,
handle with care.
@@ -26,6 +28,8 @@ faad2 (Hugo Lefeuvre)
firmware-nonfree (Emilio)
NOTE: 20190304: https://lists.debian.org/debian-lts/2019/03/msg00000.html
--
+ghostscript
+--
glib2.0
--
hdf5 (Hugo Lefeuvre)
@@ -67,6 +71,8 @@ linux (Ben Hutchings)
--
linux-4.9 (Ben Hutchings)
--
+neutron (Thorsten Alteholz)
+--
openjdk-7 (Emilio)
NOTE: 20190304: updating to 7u211
--
@@ -87,6 +93,8 @@ polarssl
poppler
NOTE: Fix available for CVE-2019-9631. Not so for CVE-2019-9543 nor
CVE-2019-9545.
--
+putty
+--
python-urllib3 (Roberto C. Sánchez)
NOTE: 20190321: Waiting on upstream action for CVE-2019-9740 (roberto)
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/93a39a9dcb1f948976c5818fa44140184bb778d7...316b130ea5ba37e93722cf912df073ec10b2e7e8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/93a39a9dcb1f948976c5818fa44140184bb778d7...316b130ea5ba37e93722cf912df073ec10b2e7e8
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
