Brian May pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6423a849 by Brian May at 2019-07-31T07:25:27Z
Mark CVE-2019-1010142 not-affected in Jessie

The test case from upstream works without error (after minor
modification), and the affected code does not appear to be present in
Jessie.

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -12967,6 +12967,7 @@ CVE-2019-1010143
        RESERVED
 CVE-2019-1010142 (scapy 2.4.0 is affected by: Denial of Service. The impact 
is: infinite ...)
        - scapy 2.4.2-1
+       [jessie] - scapy <not-affected> (Vulnerable code not present)
        NOTE: https://github.com/secdev/scapy/pull/1409
        NOTE: 
https://github.com/secdev/scapy/commit/0d7ae2b039f650a40e511d09eb961c782da025d9 
(v2.4.1)
        NOTE: 
https://github.com/secdev/scapy/pull/1409/files#diff-441eff981e466959968111fc6314fe93L1058


=====================================
data/dla-needed.txt
=====================================
@@ -104,8 +104,6 @@ ruby-openid
   NOTE: 20190710: I'm at a loss to how to continue persuing this issue (see 
https://github.com/openid/ruby-openid/issues/122) so returning to the pool. 
(lamby)
   NOTE: 20190726: Still unknown how to fix (see aforementioned github issue) 
(lamby)
 --
-scapy
---
 slurm-llnl
 --
 sox



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/6423a849b37961d05c841e762a763cd5037e5347

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/6423a849b37961d05c841e762a763cd5037e5347
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to