Abhijith PA pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
07f7c4e9 by Abhijith PA at 2021-03-08T00:54:23+05:30
mark CVE-2020-28491 as no-dsa
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -26314,6 +26314,8 @@ CVE-2020-28492
CVE-2020-28491 (This affects the package
com.fasterxml.jackson.dataformat:jackson-data ...)
- jackson-dataformat-cbor <unfixed> (bug #983664)
[buster] - jackson-dataformat-cbor <no-dsa> (Minor issue)
+ [stretch] - jackson-dataformat-cbor <no-dsa> (Minor issue)
+ NOTE: https://people.debian.org/~abhijith/CVE-2020-28491.txt (stretch
fix)
NOTE:
https://github.com/FasterXML/jackson-dataformats-binary/commit/de072d314af8f5f269c8abec6930652af67bc8e6
NOTE: https://github.com/FasterXML/jackson-dataformats-binary/issues/186
CVE-2020-28490 (The package async-git before 1.13.2 are vulnerable to Command
Injectio ...)
=====================================
data/dla-needed.txt
=====================================
@@ -55,13 +55,11 @@ golang-gogoprotobuf (Ola Lundqvist)
--
gsoap
--
-jackson-dataformat-cbor (Abhijith PA)
---
libebml (Thorsten Alteholz)
NOTE: 20210221: testing package
--
libupnp
- NOTE: 20210302: since utkarsh working wpa, might want to handle this as well
? (abhijith)
+ NOTE: 20210302: since utkarsh working on wpa, might want to handle this as
well ? (abhijith)
--
linux (Ben Hutchings)
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/07f7c4e968082c2e553af96084ec40c39f46acfb
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/07f7c4e968082c2e553af96084ec40c39f46acfb
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
