[Git][security-tracker-team/security-tracker][master] Triage results.

Ola Lundqvist opal at debian.org
Wed Feb 6 22:03:23 GMT 2019


Ola Lundqvist pushed to branch master at Debian Security Tracker / security-tracker


Commits:
831b74e7 by Ola Lundqvist at 2019-02-06T22:02:42Z
Triage results.

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -1378,6 +1378,7 @@ CVE-2019-6989
 CVE-2019-6988 (An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers ...)
 	- openjpeg2 <unfixed> (low)
 	[stretch] - openjpeg2 <ignored> (Minor issue)
+	[jessie] - openjpeg2 <ignored> (Minor issue)
 	NOTE: https://github.com/uclouvain/openjpeg/issues/1178
 CVE-2019-6987
 	RESERVED
@@ -8360,6 +8361,7 @@ CVE-2019-3821
 CVE-2019-3820 [partial lock screen bypass]
 	RESERVED
 	- gnome-shell 3.30.2-3 (bug #921490)
+	[jessie] - gnome-shell <not-affected> (Vulnerable code not present)
 	NOTE: Introduced by: https://bugzilla.gnome.org/show_bug.cgi?id=745039
 	NOTE: Introduced by: https://gitlab.gnome.org/GNOME/gnome-shell/commit/c79d24b60e773262091023feb6ee1b3deef1c471
 	NOTE: Upstream issue: https://gitlab.gnome.org/GNOME/gnome-shell/issues/851


=====================================
data/dla-needed.txt
=====================================
@@ -17,6 +17,8 @@ ceph
 --
 coturn (Emilio)
 --
+curl
+--
 dovecot (Chris Lamb)
 --
 drupal7



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/831b74e7a74c29f7c072310eb131ff3ec131afa5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/831b74e7a74c29f7c072310eb131ff3ec131afa5
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190206/7e31bc3f/attachment.html>


More information about the debian-security-tracker-commits mailing list