Hugo Lefeuvre pushed to branch master at Debian Security Tracker / security-tracker
Commits: 862bf5a5 by Hugo Lefeuvre at 2019-10-07T09:05:00Z dla-needed: claim cacti - - - - - 9519c666 by Hugo Lefeuvre at 2019-10-07T09:05:01Z openjpeg2/CVE-2018-21010: no-dsa in stretch/buster as discussed in https://bugs.debian.org/939553 - - - - - 2 changed files: - data/CVE/list - data/dla-needed.txt Changes: ===================================== data/CVE/list ===================================== @@ -3447,6 +3447,8 @@ CVE-2019-15925 (An issue was discovered in the Linux kernel before 5.2.3. An out NOTE: https://git.kernel.org/linus/04f25edb48c441fc278ecc154c270f16966cbb90 CVE-2018-21010 (OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_pr ...) - openjpeg2 <unfixed> (bug #939553) + [buster] - openjpeg2 <no-dsa> (Minor issue) + [stretch] - openjpeg2 <no-dsa> (Minor issue) NOTE: https://github.com/uclouvain/openjpeg/commit/2e5ab1d9987831c981ff05862e8ccf1381ed58ea CVE-2018-21009 (Poppler before 0.66.0 has an integer overflow in Parser::makeStream in ...) {DLA-1939-1} ===================================== data/dla-needed.txt ===================================== @@ -13,7 +13,7 @@ https://wiki.debian.org/LTS/Development#Triage_new_security_issues ampache (Roberto C. Sánchez) NOTE: package only in Jessie -- -cacti +cacti (Hugo Lefeuvre) -- clamav (Hugo Lefeuvre) NOTE: 20191002: we are backporting 0.101.4+dfsg-0+deb9u1 to jessie, meaning View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/1c9417dbd01cb0ab1374128a38aef8b8c995f967...9519c6667b3aeb7b9d17688a6c2e5679f4366247 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/1c9417dbd01cb0ab1374128a38aef8b8c995f967...9519c6667b3aeb7b9d17688a6c2e5679f4366247 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
