Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d5def294 by Salvatore Bonaccorso at 2020-01-20T16:15:05+01:00
Remove no-dsa tagged entries which got an update
According to 27cacdce393d ("DLA-2072-1: fix fixed CVEs") those three
CVEs were fixed as well in the recent DLA-2072-1, thus removing the
no-dsa/postponed tags.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -24980,14 +24980,12 @@ CVE-2018-21016 (audio_sample_entry_AddBox() at
isomedia/box_code_base.c in GPAC
- gpac <unfixed> (bug #940882)
[buster] - gpac <no-dsa> (Minor issue)
[stretch] - gpac <no-dsa> (Minor issue)
- [jessie] - gpac <postponed> (Minor issue, local DoS in function
'mp4a_AddBox')
NOTE: https://github.com/gpac/gpac/issues/1180
NOTE:
https://github.com/gpac/gpac/commit/ea13945f3c2dc2c21e30e2731bf2782384307a13
CVE-2018-21015 (AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1
allows remot ...)
- gpac <unfixed> (bug #940882)
[buster] - gpac <no-dsa> (Minor issue)
[stretch] - gpac <no-dsa> (Minor issue)
- [jessie] - gpac <postponed> (Minor issue, local DoS)
NOTE: https://github.com/gpac/gpac/issues/1179
NOTE:
https://github.com/gpac/gpac/commit/0545bb0a01bfac6764c43bd5074e9c2d1eae495f
CVE-2019-16342
@@ -33640,7 +33638,6 @@ CVE-2019-13618 (In GPAC before 0.8.0,
isomedia/isom_read.c in libgpac.a has a he
- gpac <unfixed> (low; bug #932242)
[buster] - gpac <no-dsa> (Minor issue)
[stretch] - gpac <no-dsa> (Minor issue)
- [jessie] - gpac <no-dsa> (Minor issue)
NOTE: https://github.com/gpac/gpac/issues/1250
NOTE:
https://github.com/gpac/gpac/commit/c23d54ed15a70b4543e3191e6ead5097cda0878b
CVE-2019-13617 (njs through 0.3.3, used in NGINX, has a heap-based buffer
over-read in ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/d5def2948a22bf4d3e50da1fc1fe6a9e23d9f9b2
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/d5def2948a22bf4d3e50da1fc1fe6a9e23d9f9b2
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
