Utkarsh Gupta pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
efc6d52b by Utkarsh Gupta at 2022-12-07T16:05:57+05:30
Reserve DLA-3231-1 for dlt-daemon
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -44719,7 +44719,6 @@ CVE-2022-31292
CVE-2022-31291 (An issue in dlt_config_file_parser.c of dlt-daemon v2.18.8
allows atta ...)
- dlt-daemon 2.18.6-2.1 (bug #1014534)
[bullseye] - dlt-daemon 2.18.6-1+deb11u1
- [buster] - dlt-daemon <no-dsa> (Minor issue)
NOTE: https://github.com/COVESA/dlt-daemon/pull/376
NOTE:
https://github.com/COVESA/dlt-daemon/commit/6a3bd901d825c7206797e36ea98e10a218f5aad2
CVE-2022-31290 (A cross-site scripting (XSS) vulnerability in Known
v1.2.2+2020061101 ...)
@@ -127743,7 +127742,6 @@ CVE-2021-23201 (NVIDIA GPU and Tegra hardware contain
a vulnerability in an inte
NOT-FOR-US: NVIDIA
CVE-2020-36244 (The daemon in GENIVI diagnostic log and trace (DLT), is
vulnerable to ...)
- dlt-daemon 2.18.6-1
- [buster] - dlt-daemon <no-dsa> (Minor issue)
NOTE: https://github.com/GENIVI/dlt-daemon/issues/265
NOTE: https://github.com/GENIVI/dlt-daemon/pull/269
NOTE:
https://github.com/GENIVI/dlt-daemon/commit/af734fe097ed379b0aa5fcf551886b1ce5098052
(v2.18.6)
@@ -150161,7 +150159,6 @@ CVE-2020-29395 (The EventON plugin through 3.0.5 for
WordPress allows addons/?q=
NOT-FOR-US: EventON plugin for WordPress
CVE-2020-29394 (A buffer overflow in the dlt_filter_load function in
dlt_common.c from ...)
- dlt-daemon 2.18.5-0.3 (bug #976228)
- [buster] - dlt-daemon <no-dsa> (Minor issue)
NOTE: https://github.com/GENIVI/dlt-daemon/issues/274
NOTE: https://github.com/GENIVI/dlt-daemon/pull/275
NOTE:
https://github.com/GENIVI/dlt-daemon/commit/ff4f44c159df6f44b48bd38c9d2f104eb360be11
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[07 Dec 2022] DLA-3231-1 dlt-daemon - security update
+ {CVE-2020-29394 CVE-2020-36244 CVE-2022-31291}
+ [buster] - dlt-daemon 2.18.0-1+deb10u1
[07 Dec 2022] DLA-3230-1 jqueryui - security update
{CVE-2021-41182 CVE-2021-41183 CVE-2021-41184 CVE-2022-31160}
[buster] - jqueryui 1.12.1+dfsg-5+deb10u1
=====================================
data/dla-needed.txt
=====================================
@@ -30,9 +30,6 @@ curl (Roberto C. Sánchez)
NOTE: 20220904: VCS: https://salsa.debian.org/lts-team/packages/curl.git
NOTE: 20220904: Special attention: high popcon!.
--
-dlt-daemon (Utkarsh)
- NOTE: 20221207: Programming language: C.
---
erlang
NOTE: 20221119: Programming language: Erlang.
NOTE: 20221119: at least CVE-2022-37026 needs to be fixed (original request
has been for Stretch)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/efc6d52bfc1d48084fb197c441b5a71b876c78ce
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/efc6d52bfc1d48084fb197c441b5a71b876c78ce
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
