Sean Whitton pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
71355329 by Sean Whitton at 2024-10-22T16:32:37+08:00
Reserve DLA-3931-1 for ghostscript
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -26532,7 +26532,6 @@ CVE-2024-29509 (Artifex Ghostscript before 10.03.0 has
a heap-based overflow whe
CVE-2024-29508 (Artifex Ghostscript before 10.03.0 has a heap-based pointer
disclosure ...)
{DSA-5760-1}
- ghostscript 10.03.0~dfsg-1
- [bullseye] - ghostscript <postponed> (Minor issue; can be fixed in next
update; http://people.debian.org/~abhijith/CVE-2024-29508.patch)
NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=707510
NOTE: https://www.openwall.com/lists/oss-security/2024/07/03/7
NOTE:
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=ff1013a0ab485b66783b70145e342a82c670906a
(ghostpdl-10.03.0)
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[22 Oct 2024] DLA-3931-1 ghostscript - security update
+ {CVE-2024-29508}
+ [bullseye] - ghostscript 9.53.3~dfsg-7+deb11u8
[22 Oct 2024] DLA-3930-1 libsepol - security update
{CVE-2021-36084 CVE-2021-36085 CVE-2021-36086 CVE-2021-36087}
[bullseye] - libsepol 3.1-1+deb11u1
=====================================
data/dla-needed.txt
=====================================
@@ -89,10 +89,6 @@ freeimage (santiago)
NOTE: 20240922: Added by Front-Desk (apo)
NOTE: 20240922: Many postponed CVE.
--
-ghostscript (Sean Whitton)
- NOTE: 20241021: Added by Front-Desk (lamby)
- NOTE: 20241021: Sync with stable (lamby)
---
glewlwyd
NOTE: 20240815: Added by Front-Desk (Beuc)
NOTE: 20240815: A couple minor issues could be sync'd from bookworm, and a
few postponed, but this can wait.
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/71355329bd9c0e9a2737a62b3a79e93d7edf1601
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/71355329bd9c0e9a2737a62b3a79e93d7edf1601
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
