Adrian Bunk pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d05d9eb4 by Adrian Bunk at 2021-11-27T23:04:53+02:00
Reserve DLA-2829-1 for libvpx
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -148189,7 +148189,6 @@ CVE-2020-0035 (In query of TelephonyProvider.java,
there is a possible access to
CVE-2020-0034 (In vp8_decode_frame of decodeframe.c, there is a possible out
of bound ...)
{DLA-2136-1}
- libvpx 1.7.0-3
- [stretch] - libvpx <no-dsa> (Minor issue)
NOTE:
https://github.com/webmproject/libvpx/commit/45daecb4f73a47ab3236a29a3a48c52324cbf19a
CVE-2020-0033 (In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a
possible out ...)
NOT-FOR-US: Android media framework
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[27 Nov 2021] DLA-2829-1 libvpx - security update
+ {CVE-2020-0034}
+ [stretch] - libvpx 1.6.1-3+deb9u3
[27 Nov 2021] DLA-2828-1 libvorbis - security update
{CVE-2017-14160 CVE-2018-10392 CVE-2018-10393}
[stretch] - libvorbis 1.3.5-4+deb9u3
=====================================
data/dla-needed.txt
=====================================
@@ -64,8 +64,6 @@ libssh2 (Ola Lundqvist)
NOTE: 20211031: but still need fixing in stretch and buster. (bunk)
NOTE: 20211116: Work in progress for stretch. (ola)
--
-libvpx (Adrian Bunk)
---
linux (Ben Hutchings)
--
linux-4.19 (Ben Hutchings)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d05d9eb457655b451d1d12d3c28deb643aced3ff
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d05d9eb457655b451d1d12d3c28deb643aced3ff
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
