Thorsten Alteholz pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f68fe267 by Thorsten Alteholz at 2019-07-22T11:04:55Z
mark two asterisk CVEs as no-dsa for Jessie
- - - - -
b38aaa76 by Thorsten Alteholz at 2019-07-22T11:05:21Z
asterisk CVEs are no-dsa
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -3324,6 +3324,7 @@ CVE-2019-13161 (An issue was discovered in Asterisk Open
Source through 13.27.0,
- asterisk 1:16.2.1~dfsg-2 (low; bug #931981)
[buster] - asterisk <no-dsa> (Minor issue)
[stretch] - asterisk <no-dsa> (Minor issue)
+ [jessie] - asterisk <no-dsa> (Minor issue)
NOTE: http://downloads.digium.com/pub/security/AST-2019-003.html
NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-28465
CVE-2019-13160
@@ -4227,6 +4228,7 @@ CVE-2019-12827 (Buffer overflow in res_pjsip_messaging in
Digium Asterisk versio
- asterisk 1:16.2.1~dfsg-2 (bug #931980)
[buster] - asterisk <no-dsa> (Minor issue)
[stretch] - asterisk <no-dsa> (Minor issue)
+ [jessie] - asterisk <no-dsa> (Minor issue)
NOTE: https://downloads.asterisk.org/pub/security/AST-2019-002.html
NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-28447
CVE-2019-12826 (A Cross-Site-Request-Forgery (CSRF) vulnerability in
widget_logic.php ...)
=====================================
data/dla-needed.txt
=====================================
@@ -9,8 +9,6 @@ To pick an issue, simply add your name behind it. To learn more
about how
this list is updated have a look at
https://wiki.debian.org/LTS/Development#Triage_new_security_issues
---
-asterisk
--
cfengine3 (Mike Gabriel)
NOTE: 20190628: likely not affected by CVE-2019-9929, but other
not-yet-CVE'ed issues ahead
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/5d8dab73ffccc7d12e2fc77e6f8db07aeb57035a...b38aaa7632c78c5a294ed5477745b4869e213237
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/5d8dab73ffccc7d12e2fc77e6f8db07aeb57035a...b38aaa7632c78c5a294ed5477745b4869e213237
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
