Thorsten Alteholz pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2dd2e1f2 by Thorsten Alteholz at 2019-11-21T16:03:40Z
add bind9
- - - - -
4bce3ccc by Thorsten Alteholz at 2019-11-21T16:03:41Z
mark CVE-2019-19126 as no-dsa for Jessie
- - - - -
4ce153c0 by Thorsten Alteholz at 2019-11-21T16:03:41Z
add otrs2
- - - - -
8ccb87c4 by Thorsten Alteholz at 2019-11-21T16:03:41Z
add ruby2.1 that is only in Jessie
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -42,6 +42,7 @@ CVE-2019-19126 (On the x86-64 architecture, the GNU C Library
(aka glibc) before
- glibc <unfixed>
[buster] - glibc <no-dsa> (Minor issue)
[stretch] - glibc <no-dsa> (Minor issue)
+ [jessie] - glibc <no-dsa> (Minor issue)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=25204
NOTE: https://sourceware.org/ml/libc-alpha/2019-11/msg00649.html
CVE-2019-19125
=====================================
data/dla-needed.txt
=====================================
@@ -20,6 +20,9 @@ ansible
NOTE: CVE-2019-14846 should be an easy fix.
NOTE: CVE-2019-14858's upstream patch is too big; fails to work properly.
(utkarsh2102)
--
+bind9 (Thorsten Alteholz)
+ NOTE: no point release in Jessie, so fix it here
+--
freeimage
NOTE: Maintainer will take care of the update.
NOTE: https://lists.debian.org/debian-lts/2019/05/msg00079.html
@@ -85,6 +88,9 @@ opendmarc (Thorsten Alteholz)
openjdk-7 (Markus Koschany)
NOTE: 20191118: Pinged upstream about a new upstream release again four days
ago. (apo)
--
+otrs2
+ NOTE: otrs2 is in jessie/main so it should be taken care off
+--
pam-python
NOTE: 20190927: Upstream appear to not have a distinct revision for this fix,
NOTE: using a single commit for the entire release which changes many
things. (lamby)
@@ -109,6 +115,8 @@ radare2
NOTE: Support status is being discussed at:
NOTE: https://lists.debian.org/debian-lts/2019/08/msg00064.html
--
+ruby2.1 (Thorsten Alteholz)
+--
ruby-rack-cors (Utkarsh Gupta)
--
slurm-llnl (Abhijith PA)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/9f29670fd43313b1e3750f2b1255f3cc7a6859bb...8ccb87c4130cee67688aa7c036714f99045bd840
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/9f29670fd43313b1e3750f2b1255f3cc7a6859bb...8ccb87c4130cee67688aa7c036714f99045bd840
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
