Thorsten Alteholz pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0d610547 by Thorsten Alteholz at 2020-04-25T23:05:38+02:00
fix missing only for Jessie, so this will be done now ...
- - - - -
0dcb414d by Thorsten Alteholz at 2020-04-25T23:05:38+02:00
Reserve DLA-2186-1 for ncmpc
- - - - -
2 changed files:
- data/CVE/list
- data/DLA/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -115011,7 +115011,6 @@ CVE-2018-9234 (GnuPG 2.2.4 and 2.2.5 does not enforce
a configuration in which k
CVE-2018-9240 (ncmpc through 0.29 is prone to a NULL pointer dereference flaw.
If a u ...)
- ncmpc 0.33-1 (low; bug #894724)
[stretch] - ncmpc 0.25-0.1+deb9u1
- [jessie] - ncmpc <no-dsa> (Minor issue)
[wheezy] - ncmpc <no-dsa> (Minor issue)
CVE-2018-9233 (Sophos Endpoint Protection 10.7 uses an unsalted SHA-1 hash for
passwo ...)
NOT-FOR-US: Sophos
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[25 Apr 2020] DLA-2186-1 ncmpc - security update
+ {CVE-2018-9240}
+ [jessie] - ncmpc 0.24-1+deb8u1
[25 Apr 2020] DLA-2185-1 eog - security update
{CVE-2016-6855}
[jessie] - eog 3.14.1-1+deb8u1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/cb69ab274315deb3e47ea2ebebd4cb672cffb6c4...0dcb414ddc57aaf95fedabc0349018a4bfe277b4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/cb69ab274315deb3e47ea2ebebd4cb672cffb6c4...0dcb414ddc57aaf95fedabc0349018a4bfe277b4
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
