Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2f8c1ddc by Salvatore Bonaccorso at 2019-11-03T16:24:48Z
Revert "CVE-2019-15682,rdesktop: Mark as fixed in Jessie"
This reverts commit c7f23fa472f9356dbc43c1016a818011379a36bd.
And restores the information on when the fix first entered unstable.
- - - - -
666fa49e by Salvatore Bonaccorso at 2019-11-03T16:24:49Z
Add fixed version for CVE-2019-15682/rdesktop for jessie
The first version entering jessie based on 1.8.6 was 1.8.6-0+deb8u1.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -8704,8 +8704,9 @@ CVE-2019-15684
CVE-2019-15683 (TurboVNC server code contains stack buffer overflow
vulnerability in c ...)
TODO: check
CVE-2019-15682 (RDesktop version 1.8.4 contains multiple out-of-bound access
read vuln ...)
- - rdesktop 1.8.6-0
+ - rdesktop 1.8.6-1
[stretch] - rdesktop 1.8.6-2~deb9u1
+ [jessie] - rdesktop 1.8.6-0+deb8u1
NOTE:
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/10/30/klcert-19-032-denial-of-service-in-rdesktop-before-1-8-4/
CVE-2019-15681 (LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a
contains ...)
{DLA-1979-1 DLA-1977-1}
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/266f26763b4767345c2ef075968220c656e3955a...666fa49ea4a924ed9e1feb0539a296881cd6e455
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/266f26763b4767345c2ef075968220c656e3955a...666fa49ea4a924ed9e1feb0539a296881cd6e455
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
