Guilhem Moulin pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
93f732af by Guilhem Moulin at 2023-09-29T21:45:12+02:00
Reserve DLA-3590-1 for python-reportlab
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -207739,7 +207739,6 @@ CVE-2020-28464 (This affects the package djv before
2.1.4. By controlling the sc
NOT-FOR-US: Node djv
CVE-2020-28463 (All versions of package reportlab are vulnerable to
Server-side Reques ...)
- python-reportlab 3.5.55-1
- [buster] - python-reportlab <no-dsa> (Minor issue)
[stretch] - python-reportlab <postponed> (Can be fixed in next DLA)
NOTE: https://snyk.io/vuln/SNYK-PYTHON-REPORTLAB-1022145
NOTE: Fixed by:
https://hg.reportlab.com/hg-public/reportlab/rev/7f2231703dc7
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[29 Sep 2023] DLA-3590-1 python-reportlab - security update
+ {CVE-2019-19450 CVE-2020-28463}
+ [buster] - python-reportlab 3.5.13-1+deb10u2
[29 Sep 2023] DLA-3589-1 python-git - security update
{CVE-2023-41040}
[buster] - python-git 2.1.11-1+deb10u2
=====================================
data/dla-needed.txt
=====================================
@@ -177,9 +177,6 @@ python-os-brick
NOTE: 20230525: Added by Front-Desk (lamby)
NOTE: 20230525: NB. CVE-2023-2088 filed against python-glance-store,
python-os-brick, nova and cinder.
--
-python-reportlab (guilhem)
- NOTE: 20230926: Added by Front-Desk (ola)
---
qemu (Sean Whitton)
NOTE: 20230924: Added by Front-Desk (apo)
NOTE: 20230924: Consider fixing postponed issues as well. (apo)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/93f732afe09a0fb00d1a71e89ee712fd82613d54
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/93f732afe09a0fb00d1a71e89ee712fd82613d54
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
