[Git][security-tracker-team/security-tracker][master] pdns-recursor fixed

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
32858254 by Moritz Muehlenhoff at 2019-01-21T16:52:34Z
pdns-recursor fixed
libpng non-issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -931,10 +931,10 @@ CVE-2019-6130 (Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of t
 	NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=700446
 	NOTE: http://www.ghostscript.com/cgi-bin/findgit.cgi?faf47b94e24314d74907f3f6bc874105f2c962ed
 CVE-2019-6129 (png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as ...)
-	- libpng1.6 <unfixed> (low)
-	[stretch] - libpng1.6 <no-dsa> (Minor issue)
+	- libpng1.6 <unfixed> (unimportant)
 	- libpng <removed>
 	NOTE: https://github.com/glennrp/libpng/issues/269
+	NOTE: Memory leak in CLI tool, no security impact
 CVE-2019-6128 (The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory ...)
 	- tiff <unfixed>
 	- tiff3 <removed>
@@ -5819,13 +5819,13 @@ CVE-2019-3808
 	RESERVED
 CVE-2019-3807 [pdns-recursor: DNSSEC validation	is not performed for AA responses]
 	RESERVED
-	- pdns-recursor <unfixed>
+	- pdns-recursor 4.1.9-1
 	[stretch] - pdns-recursor <not-affected> (Only affects 4.1.x)
 	[jessie] - pdns-recursor <not-affected> (Only affects 4.1.x)
 	NOTE: https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2019-02.html
 CVE-2019-3806 [pdns-recursor: Lua hooks are not	called over TCP]
 	RESERVED
-	- pdns-recursor <unfixed>
+	- pdns-recursor 4.1.9-1
 	[stretch] - pdns-recursor <not-affected> (Only affects 4.1.x)
 	[jessie] - pdns-recursor <not-affected> (Only affects 4.1.x)
 	NOTE: https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2019-01.html



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/3285825446d19a36ec0e1a8d01c3ce4f14dba934

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/3285825446d19a36ec0e1a8d01c3ce4f14dba934
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190121/dbeaa9d6/attachment.html>