Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker
Commits: e2f02788 by Utkarsh Gupta at 2022-10-01T04:29:19+05:30 Reserve DLA-3129-1 for gdal - - - - - 3 changed files: - data/CVE/list - data/DLA/list - data/dla-needed.txt Changes: ===================================== data/CVE/list ===================================== @@ -215524,7 +215524,6 @@ CVE-2019-17546 (tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL throug CVE-2019-17545 (GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ...) {DLA-2877-1 DLA-1984-1} - gdal 2.4.2+dfsg-2 (low) - [buster] - gdal <no-dsa> (Minor issue) NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16178 NOTE: https://github.com/OSGeo/gdal/commit/148115fcc40f1651a5d15fa34c9a8c528e7147bb CVE-2019-17544 (libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over- ...) ===================================== data/DLA/list ===================================== @@ -1,3 +1,6 @@ +[01 Oct 2022] DLA-3129-1 gdal - security update + {CVE-2019-17545 CVE-2021-45943} + [buster] - gdal 2.4.0+dfsg-1+deb10u1 [01 Oct 2022] DLA-3128-1 node-thenify - security update {CVE-2020-7677} [buster] - node-thenify 3.3.0-1+deb10u1 ===================================== data/dla-needed.txt ===================================== @@ -40,11 +40,6 @@ firmware-nonfree frr (Thorsten Alteholz) NOTE: 20220923: Programming language: C. -- -gdal (Utkarsh) - NOTE: 20220913: Programming language: C/C++, Python. - NOTE: 20220913: Upcoming DSA (Beuc/front-desk) - NOTE: 20220913: 2 CVEs already fixed in stretch&jessie (Beuc/front-desk) --- gerbv NOTE: 20220923: Programming language: C. -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e2f02788d8fb33a40c4f5300d83978a430a18559 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e2f02788d8fb33a40c4f5300d83978a430a18559 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits