Adrian Bunk pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4affac49 by Adrian Bunk at 2020-06-30T22:19:53+03:00
Reserve DLA-2267-1 for libmatio
- - - - -
2 changed files:
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[30 Jun 2020] DLA-2267-1 libmatio - security update
+ {CVE-2019-17533}
+ [jessie] - libmatio 1.5.2-3+deb8u1
[30 Jun 2020] DLA-2266-1 nss - security update
{CVE-2020-12399 CVE-2020-12402}
[jessie] - nss 2:3.26-1+debu8u11
=====================================
data/dla-needed.txt
=====================================
@@ -67,19 +67,6 @@ libdatetime-timezone-perl
NOTE: 20200620: There is no security issue with the package. What we want to
do is to provide an up to date timezone
NOTE: 20200620: database but that is not urgent. We want to provide
2020a-0+deb8u1. (according to email, node added by ola)
--
-libmatio (Adrian Bunk)
- NOTE: fairly high number of open issues. Not sure why we never had a look at
them.
- NOTE: triage work needed, help security team for fixes if needed.
- NOTE: 20190428: most patches can be applied after context adaption
- NOTE: 20190428: all CVEs are from one fuzzing attempt
- NOTE: 20190428: some CVE testcases pass on the unpatched version,
- NOTE: 20190428: but since the fixes can be made applied the code
- NOTE: 20190428: is likely vulnerable
- NOTE: 20190428: some CVE testcases still fail after applying the fix,
- NOTE: 20190428: older changes seem to also be required for them
- NOTE: 20200615: work is ongoing (bunk)
- NOTE: 20200629: pending release (bunk)
---
linux (Ben Hutchings)
--
linux-4.9 (Ben Hutchings)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4affac49e307e4b18c478eee5ec255209d3a3675
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4affac49e307e4b18c478eee5ec255209d3a3675
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
