[Git][security-tracker-team/security-tracker][master] 4 commits: mark CVE-2018-19760 as no-dsa for Jessie

[Thorsten Alteholz]

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2b23d4af by Thorsten Alteholz at 2018-12-02T21:35:45Z
mark CVE-2018-19760 as no-dsa for Jessie

- - - - -
030c8d5b by Thorsten Alteholz at 2018-12-02T21:40:27Z
add jasper

- - - - -
c9e79efb by Thorsten Alteholz at 2018-12-02T21:41:53Z
add freerdp

- - - - -
95e5216e by Thorsten Alteholz at 2018-12-02T21:49:19Z
add exiv2

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -60,6 +60,7 @@ CVE-2018-19761 (There is an illegal address access at fromsixel.c (function: ...
 CVE-2018-19760 (cfg_init in confuse.c in libConfuse 3.2.2 has a memory leak. ...)
 	- confuse <unfixed> (low)
 	[stretch] - confuse <no-dsa> (Minor issue)
+	[jessie] - confuse <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1649152
 CVE-2018-19759 (There is a heap-based buffer over-read at stb_image_write.h (function: ...)
 	TODO: check


=====================================
data/dla-needed.txt
=====================================
@@ -16,6 +16,14 @@ cairo
 enigmail
   NOTE: 20181113: depends on gnupg2 updates, see 87r2fqnja0.fsf at curie.anarc.at (anarcat)
 --
+exiv2 (Thorsten Alteholz)
+  NOTE: also recheck other CVEs
+--
+freerdp
+  NOTE: 20181202: Mike is uploader, so he should probably take this
+--
+jasper
+--
 libapache-mod-jk (Roberto C. Sánchez)
   NOTE: 20181123: Packages ready, testing complete, waiting on security team feedback,
   NOTE: 20181123: as this work includes an updated package for stretch.  (roberto)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/a1363ac565d4d5dd6ae5113021793eb03be620a7...95e5216e0781ef6afa06cf9228a30756ecc0f578

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/a1363ac565d4d5dd6ae5113021793eb03be620a7...95e5216e0781ef6afa06cf9228a30756ecc0f578
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181202/0bf723d6/attachment-0001.html>