Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4b4450ee by Salvatore Bonaccorso at 2020-02-14T23:51:42+01:00
Reserve DSA number for evince update
- - - - -
3 changed files:
- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -45353,6 +45353,7 @@ CVE-2019-11459 (The tiff_document_render() and
tiff_document_get_thumbnail() fun
- atril 1.22.3-1 (unimportant; bug #927821)
[buster] - atril 1.20.3-1+deb10u1
- evince 3.32.0-3 (unimportant; bug #927820)
+ [buster] - evince 3.30.2-3+deb10u1
NOTE: https://gitlab.gnome.org/GNOME/evince/issues/1129
NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/evince/commit/3e38d5ad724a042eebadcba8c2d57b0f48b7a8c7
NOTE: Negligible security impact
=====================================
data/DSA/list
=====================================
@@ -1,3 +1,6 @@
+[14 Feb 2020] DSA-4624-1 evince - security update
+ {CVE-2017-1000159 CVE-2019-11459 CVE-2019-1010006}
+ [stretch] - evince 3.22.1-3+deb9u2
[13 Feb 2020] DSA-4623-1 postgresql-11 - security update
{CVE-2020-1720}
[buster] - postgresql-11 11.7-0+deb10u1
=====================================
data/dsa-needed.txt
=====================================
@@ -14,8 +14,6 @@ If needed, specify the release by adding a slash after the
name of the source pa
--
curl (ghedo)
--
-evince/oldstable (carnil)
---
glusterfs/oldstable
--
graphicsmagick
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/4b4450ee254bc1d5339093ed4a64d2505c69c9ae
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/4b4450ee254bc1d5339093ed4a64d2505c69c9ae
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
