[Git][security-tracker-team/security-tracker][master] 2 commits: mark CVE-2019-13590 as ignored for Jessie

[Thorsten Alteholz]

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a6817d37 by Thorsten Alteholz at 2019-08-16T09:30:59Z
mark CVE-2019-13590 as ignored for Jessie

- - - - -
d84ee4e0 by Thorsten Alteholz at 2019-08-16T10:06:10Z
sox CVE is ignored

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -5458,6 +5458,7 @@ CVE-2019-13590 (An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h
 	- sox <unfixed> (low; bug #932082)
 	[buster] - sox <ignored> (Minor issue)
 	[stretch] - sox <ignored> (Minor issue)
+	[jessie] - sox <ignored> (Minor issue)
 	NOTE: https://sourceforge.net/p/sox/bugs/325/
 CVE-2019-13589 (The paranoid2 gem 1.1.6 for Ruby, as distributed on RubyGems.org, incl ...)
 	NOT-FOR-US: backdoor in paranoid_2 gem, different from src:ruby-paranoia


=====================================
data/dla-needed.txt
=====================================
@@ -107,9 +107,6 @@ ruby-openid
 slurm-llnl (Abhijith PA)
   NOTE: 20190814: Contacted security of slurm-llnl for relevant commits (abhijith)
 --
-sox
-  NOTE: 20190721: no patch available (hle)
---
 subversion (Roberto C. Sánchez)
   NOTE: 20190804: For (at least) CVE-2018-11782 the svn_err_trace that is in the diff has not been added yet. (lamby)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/a147cd5a300f83797d6cf1b3a770c2184dd3d68e...d84ee4e0acf28f1892e56f33b42ebeda2db9259e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/a147cd5a300f83797d6cf1b3a770c2184dd3d68e...d84ee4e0acf28f1892e56f33b42ebeda2db9259e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190816/4ded6702/attachment-0001.html>