Thorsten Alteholz pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a6817d37 by Thorsten Alteholz at 2019-08-16T09:30:59Z
mark CVE-2019-13590 as ignored for Jessie
- - - - -
d84ee4e0 by Thorsten Alteholz at 2019-08-16T10:06:10Z
sox CVE is ignored
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -5458,6 +5458,7 @@ CVE-2019-13590 (An issue was discovered in libsox.a in
SoX 14.4.2. In sox-fmt.h
- sox <unfixed> (low; bug #932082)
[buster] - sox <ignored> (Minor issue)
[stretch] - sox <ignored> (Minor issue)
+ [jessie] - sox <ignored> (Minor issue)
NOTE: https://sourceforge.net/p/sox/bugs/325/
CVE-2019-13589 (The paranoid2 gem 1.1.6 for Ruby, as distributed on
RubyGems.org, incl ...)
NOT-FOR-US: backdoor in paranoid_2 gem, different from src:ruby-paranoia
=====================================
data/dla-needed.txt
=====================================
@@ -107,9 +107,6 @@ ruby-openid
slurm-llnl (Abhijith PA)
NOTE: 20190814: Contacted security of slurm-llnl for relevant commits
(abhijith)
--
-sox
- NOTE: 20190721: no patch available (hle)
---
subversion (Roberto C. Sánchez)
NOTE: 20190804: For (at least) CVE-2018-11782 the svn_err_trace that is in
the diff has not been added yet. (lamby)
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/a147cd5a300f83797d6cf1b3a770c2184dd3d68e...d84ee4e0acf28f1892e56f33b42ebeda2db9259e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/a147cd5a300f83797d6cf1b3a770c2184dd3d68e...d84ee4e0acf28f1892e56f33b42ebeda2db9259e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
