Thorsten Alteholz pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ede8f02f by Thorsten Alteholz at 2020-08-27T22:55:04+02:00
mark CVE-2020-24616 as no-dsa for Stretch
- - - - -
e8ba79d8 by Thorsten Alteholz at 2020-08-27T22:55:04+02:00
add xorg-server
- - - - -
e1a25dbe by Thorsten Alteholz at 2020-08-27T22:55:05+02:00
mark CVE-2020-17376 as no-dsa for Stretch
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -206,6 +206,7 @@ CVE-2020-24617
CVE-2020-24616 (FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the
interact ...)
- jackson-databind <unfixed>
[buster] - jackson-databind <no-dsa> (Minor issue)
+ [stretch] - jackson-databind <no-dsa> (Minor issue)
NOTE: https://github.com/FasterXML/jackson-databind/issues/2814
NOTE: Starting from 2.10 series mitigated as Safe Default Typing is
enabled by default
NOTE: but still an issue when Default Typing is enabled.
@@ -14773,6 +14774,7 @@ CVE-2020-17377
CVE-2020-17376 (An issue was discovered in Guest.migrate in
virt/libvirt/guest.py in O ...)
- nova 2:21.1.0-1 (bug #969052)
[buster] - nova <no-dsa> (Minor issue)
+ [stretch] - nova <no-dsa> (Minor issue)
NOTE: https://launchpad.net/bugs/1890501
NOTE: https://www.openwall.com/lists/oss-security/2020/08/25/4
CVE-2020-17375
=====================================
data/dla-needed.txt
=====================================
@@ -212,3 +212,5 @@ xcftools
NOTE: 20200523: Proposed fix https://github.com/j-jorge/xcftools/pull/15
(gladk)
NOTE: 20200605: Patch
https://salsa.debian.org/lts-team/packages/xcftools/-/blob/fix/test-CVE-2019-5087/debian/patches/CVE-2019-5087.patch
(gladk)
--
+xorg-server (Thorsten Alteholz)
+--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/eb4844a722fb8704080ca2aa69e6f740145133d6...e1a25dbe8ce26e4e865fc80049fe79295442e9e5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/eb4844a722fb8704080ca2aa69e6f740145133d6...e1a25dbe8ce26e4e865fc80049fe79295442e9e5
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
