Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a9d86c13 by Moritz Muehlenhoff at 2019-02-19T21:16:37Z
stretch triage
- - - - -
2 changed files:
- data/CVE/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -3231,8 +3231,9 @@ CVE-2019-7444
CVE-2019-7443 [Insecure handling of arguments in helpers]
RESERVED
- kauth 5.54.0-2 (bug #921995)
- [stretch] - kauth <no-dsa> (Minor issue)
+ [stretch] - kauth <no-dsa> (Minor issue, will be fixed in a point
release)
- kde4libs <unfixed>
+ [stretch] - kde4libs <no-dsa> (Minor issue)
NOTE:
https://mail.kde.org/pipermail/kde-announce/2019-February/000011.html
NOTE:
https://cgit.kde.org/kauth.git/commit/?id=fc70fb0161c1b9144d26389434d34dd135cd3f4a
CVE-2019-7442
@@ -29300,6 +29301,7 @@ CVE-2018-16868 (A Bleichenbacher type side-channel
based padding oracle attack w
NOTE: nettle version.
CVE-2018-16867 (A flaw was found in qemu Media Transfer Protocol (MTP) before
version ...)
- qemu 1:3.1+dfsg-1 (bug #915884)
+ [stretch] - qemu <not-affected> (Vulnerable code not present)
- qemu-kvm <removed>
NOTE:
https://lists.gnu.org/archive/html/qemu-devel/2018-12/msg00390.html
NOTE:
https://git.qemu.org/?p=qemu.git;a=commit;h=c52d46e041b42bb1ee6f692e00a0abe37a9659f6
(master)
=====================================
data/dsa-needed.txt
=====================================
@@ -28,6 +28,9 @@ graphicsmagick
libidn
santiago proposed debdiffs for jessie and stretch
--
+libpng1.6
+ wait for final patch
+--
libspring-java
--
linux
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/a9d86c1336cad0d06ba9ece636395892232aecd4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/a9d86c1336cad0d06ba9ece636395892232aecd4
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
