Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2bb5faa5 by Salvatore Bonaccorso at 2019-11-15T12:21:19Z
leopton removed from unstable
- - - - -
d7d8ce22 by Salvatore Bonaccorso at 2019-11-15T12:21:54Z
Mark lepton as removed from Debian everywhere
- - - - -
2 changed files:
- data/CVE/list
- data/packages/removed-packages
Changes:
=====================================
data/CVE/list
=====================================
@@ -25184,7 +25184,7 @@ CVE-2018-20821 (The parsing component in LibSass
through 3.5.5 allows attackers
NOTE: Introduced by:
https://github.com/sass/libsass/commit/efd97dae376de50b3e6ed724337c4f274a21491d
(3.5.0)
NOTE: Fixed by:
https://github.com/sass/libsass/commit/f2db04883e5fff4e03777dcc1eb60d4373c45be1
CVE-2018-20820 (read_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows
attackers to c ...)
- - lepton <unfixed> (bug #927925)
+ - lepton <removed> (bug #927925)
NOTE:
https://github.com/dropbox/lepton/commit/6a5ceefac1162783fffd9506a3de39c85c725761
NOTE: https://github.com/dropbox/lepton/issues/111
CVE-2018-20819 (io/ZlibCompression.cc in the decompression component in
Dropbox Lepton ...)
@@ -77029,7 +77029,7 @@ CVE-2018-12109 (An issue was discovered in Free
Lossless Image Format (FLIF) 0.3
- flif <removed> (bug #902196)
NOTE: https://github.com/FLIF-hub/FLIF/issues/513
CVE-2018-12108 (An issue was discovered in Dropbox Lepton 1.2.1. The
validateAndCompre ...)
- - lepton <unfixed> (bug #905494)
+ - lepton <removed> (bug #905494)
NOTE: https://github.com/dropbox/lepton/issues/107
CVE-2018-12107
RESERVED
=====================================
data/packages/removed-packages
=====================================
@@ -702,3 +702,4 @@ freebsd-utils
flif
openjdk-12
golang-1.12
+lepton
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/712b1868a6b664ffc03c7aa92022c7be97dfd457...d7d8ce22fe2e2963608d7a2956996ab35189861c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/712b1868a6b664ffc03c7aa92022c7be97dfd457...d7d8ce22fe2e2963608d7a2956996ab35189861c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
