Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6752cf60 by Emilio Pozuelo Monfort at 2021-12-30T11:25:24+01:00
lts: triage php-nette
- - - - -
93b1d840 by Emilio Pozuelo Monfort at 2021-12-30T11:34:03+01:00
lts: triage pjproject
- - - - -
951c9f37 by Emilio Pozuelo Monfort at 2021-12-30T11:39:30+01:00
lts: triage epiphany
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -2818,18 +2818,22 @@ CVE-2021-45089 (Stormshield Endpoint Security 2.x
before 2.1.2 has Incorrect Acc
NOT-FOR-US: Stormshield Endpoint Security
CVE-2021-45088 (XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x
before ...)
- epiphany-browser 41.2-1
+ [stretch] - epiphany-browser <ignored> (WebKit browser, not covered by
security support in stretch)
NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/issues/1612
NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1045
CVE-2021-45087 (XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x
before ...)
- epiphany-browser 41.2-1
+ [stretch] - epiphany-browser <ignored> (WebKit browser, not covered by
security support in stretch)
NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/issues/1612
NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1045
CVE-2021-45086 (XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x
before ...)
- epiphany-browser 41.2-1
+ [stretch] - epiphany-browser <ignored> (WebKit browser, not covered by
security support in stretch)
NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/issues/1612
NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1045
CVE-2021-45085 (XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x
before ...)
- epiphany-browser 41.2-1
+ [stretch] - epiphany-browser <ignored> (WebKit browser, not covered by
security support in stretch)
NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/issues/1612
NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1045
CVE-2021-45084
=====================================
data/dla-needed.txt
=====================================
@@ -85,6 +85,11 @@ nvidia-graphics-drivers (Markus Koschany)
pgbouncer (Christoph Berg)
NOTE: 20211220: maintainer might want to upload fixed version
--
+php-nette
+--
+pjproject
+ NOTE: 20211230: patch available for the no-dsa issue, check its NOTE (pochu)
+--
samba (Utkarsh Gupta)
NOTE: 20211128: WIP https://salsa.debian.org/lts-team/packages/samba/
NOTE: 20211212: Fix is too large, coordination with ELTS-upload
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/d13dafbb914e81b33ae171206626be42b250b546...951c9f37599275b6ea60ce8670d3e22f3a9c1ac8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/d13dafbb914e81b33ae171206626be42b250b546...951c9f37599275b6ea60ce8670d3e22f3a9c1ac8
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
