Sylvain Beucler pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
cb738231 by Sylvain Beucler at 2021-11-20T11:29:34+01:00
Reserve DLA-2824-1 for firebird3.0
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -272975,7 +272975,6 @@ CVE-2017-11510 (An information leak exists in
Wanscam's HW0021 network camera th
CVE-2017-11509 (An authenticated remote attacker can execute arbitrary code in
Firebir ...)
{DLA-2129-1 DLA-1374-1}
- firebird3.0 3.0.3.32900.ds4-3
- [stretch] - firebird3.0 <postponed> (Minor issue, can be fixed along in
a future update)
- firebird2.5 <removed>
NOTE: https://www.tenable.com/security/research/tra-2017-36
NOTE: https://github.com/FirebirdSQL/firebird/issues/5787
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[20 Nov 2021] DLA-2824-1 firebird3.0 - security update
+ {CVE-2017-11509}
+ [stretch] - firebird3.0 3.0.1.32609.ds4-14+deb9u1
[19 Nov 2021] DLA-2823-1 salt - security update
{CVE-2021-21996}
[stretch] - salt 2016.11.2+ds-1+deb9u8
=====================================
data/dla-needed.txt
=====================================
@@ -30,10 +30,6 @@ debian-archive-keyring
exiv2 (Thorsten Alteholz)
NOTE: 20211109: testing package
--
-firebird3.0 (Sylvain Beucler)
- NOTE: 20211118: CVE-2017-11509 was fixed in firebird2.5 in wheezy
(DLA-1374-1)
- NOTE: 20211118: and jessie (DLA-2129-1) but is unfixed in firebird in
stretch. (bunk)
---
firefox-esr (Emilio)
NOTE: 20211116: blocked on toolchain backports (pochu)
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb73823153415dc3e82841f0a8fbd29f4abf7124
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb73823153415dc3e82841f0a8fbd29f4abf7124
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
