Adrian Bunk pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0e39331b by Adrian Bunk at 2021-10-30T21:05:00+03:00
Reserve DLA-2801-1 for cron
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -169773,17 +169773,14 @@ CVE-2019-9707
CVE-2019-9705 (Vixie Cron before the 3.0pl1-133 Debian package allows local
users to ...)
{DLA-1723-1}
- cron 3.0pl1-133 (low)
- [stretch] - cron <no-dsa> (Minor issue, will be fixed via point update)
NOTE: Fixed by: https://salsa.debian.org/debian/cron/commit/26814a26
CVE-2019-9706 (Vixie Cron before the 3.0pl1-133 Debian package allows local
users to ...)
{DLA-1723-1}
- cron 3.0pl1-133 (bug #809167)
- [stretch] - cron <no-dsa> (Minor issue, will be fixed via point update)
NOTE: Fixed by: https://salsa.debian.org/debian/cron/commit/40791b93
CVE-2019-9704 (Vixie Cron before the 3.0pl1-133 Debian package allows local
users to ...)
{DLA-1723-1}
- cron 3.0pl1-133 (low)
- [stretch] - cron <no-dsa> (Minor issue, will be fixed via point update)
NOTE: Fixed by: https://salsa.debian.org/debian/cron/commit/f2525567
CVE-2019-9703 (Symantec Endpoint Encryption, prior to SEE 11.3.0, may be
susceptible ...)
NOT-FOR-US: Symantec
@@ -274029,7 +274026,6 @@ CVE-2017-9524 (The qemu-nbd server in QEMU (aka Quick
Emulator), when built with
CVE-2017-9525 (In the cron package through 3.0pl1-128 on Debian, and through
3.0pl1-1 ...)
{DLA-1723-1}
- cron 3.0pl1-129 (bug #864466)
- [stretch] - cron <no-dsa> (Minor issue)
[wheezy] - cron <no-dsa> (Minor issue)
- systemd-cron 1.5.17-2 (bug #993731)
[bullseye] - systemd-cron <no-dsa> (Minor issue)
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[30 Oct 2021] DLA-2801-1 cron - security update
+ {CVE-2017-9525 CVE-2019-9704 CVE-2019-9705 CVE-2019-9706}
+ [stretch] - cron 3.0pl1-128+deb9u2
[30 Oct 2021] DLA-2800-1 cups - security update
{CVE-2020-10001}
[stretch] - cups 2.2.1-8+deb9u7
=====================================
data/dla-needed.txt
=====================================
@@ -20,8 +20,6 @@ ansible
--
botan1.10 (Anton Gladky)
--
-cron (Adrian Bunk)
---
debian-archive-keyring
NOTE: https://lists.debian.org/debian-lts/2021/08/msg00037.html
NOTE: 20210920: Raphael answered. will backport today. (utkarsh)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0e39331b89d534b0b67526c032361242ac7e58a8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0e39331b89d534b0b67526c032361242ac7e58a8
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
