Utkarsh Gupta pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5c20fed3 by Utkarsh Gupta at 2021-12-27T22:39:47+05:30
Reserve DLA-2854-1 for novnc
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -156919,7 +156919,6 @@ CVE-2019-16889 (Ubiquiti EdgeMAX devices before 2.0.3
allow remote attackers to
CVE-2017-18635 (An XSS vulnerability was discovered in noVNC before 0.6.2 in
which the ...)
{DLA-1946-1}
- novnc 1:1.0.0-1
- [stretch] - novnc <no-dsa> (Minor issue)
NOTE: https://bugs.launchpad.net/horizon/+bug/1656435
NOTE:
https://github.com/novnc/noVNC/commit/6048299a138e078aed210f163111698c8c526a13#diff-286f7dc7b881e942e97cd50c10898f03L534
NOTE: https://github.com/novnc/noVNC/issues/748
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[27 Dec 2021] DLA-2854-1 novnc - security update
+ {CVE-2017-18635}
+ [stretch] - novnc 1:0.4+dfsg+1+20131010+gitf68af8af3d-6+deb9u1
[27 Dec 2021] DLA-2853-1 ruby2.3 - security update
{CVE-2021-41817 CVE-2021-41819}
[stretch] - ruby2.3 2.3.3-1+deb9u11
=====================================
data/dla-needed.txt
=====================================
@@ -73,10 +73,6 @@ lxml (Utkarsh)
--
monit (Adrian Bunk)
--
-novnc (Utkarsh)
- NOTE: 20211227: CVE-2017-18635 was fixed in jessie in DLA-1946-1
- NOTE: 20211227: but is unfixed in stretch (bunk)
---
nvidia-graphics-drivers (Markus Koschany)
NOTE: package is in non-free but also in packages-to-support
NOTE: only CVE‑2021‑1076 seems to be fixed in the R390 branch used in
Stretch, no fix available for CVE-2021-1077
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5c20fed30b1fcfbe39c0d17ef19289eb397b2a2b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5c20fed30b1fcfbe39c0d17ef19289eb397b2a2b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
