[Git][security-tracker-team/security-tracker][master] 2 commits: Mark CVE-2019-12106/minissdpd as no-dsa

Salvatore Bonaccorso carnil at debian.org
Mon May 27 13:12:32 BST 2019



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4b4fe260 by Salvatore Bonaccorso at 2019-05-27T12:12:19Z
Mark CVE-2019-12106/minissdpd as no-dsa

- - - - -
ca4a034a by Salvatore Bonaccorso at 2019-05-27T12:12:19Z
Track proposed fix for CVE-2019-12106 via stretch-pu

- - - - -


2 changed files:

- data/CVE/list
- data/next-point-update.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -532,6 +532,7 @@ CVE-2019-12107 (The upnp_event_prepare function in upnpevents.c in MiniUPnP Mini
 CVE-2019-12106 (The updateDevice function in minissdpd.c in MiniUPnP MiniSSDPd 1.4 and ...)
 	{DLA-1805-1}
 	- minissdpd 1.5.20190210-1 (bug #929297)
+	[stretch] - minissdpd <no-dsa> (Minor issue)
 	NOTE: https://github.com/miniupnp/miniupnp/commit/cd506a67e174a45c6a202eff182a712955ed6d6f
 CVE-2019-12105
 	RESERVED


=====================================
data/next-point-update.txt
=====================================
@@ -81,3 +81,5 @@ CVE-2019-2614
 	[stretch] - mariadb-10.1 10.1.40-0+deb9u1
 CVE-2018-19105
 	[stretch] - librecad 2.1.2-1+deb9u1
+CVE-2019-12106
+	[stretch] - minissdpd 1.2.20130907-4.1+deb9u1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/6a7cb531fab0a2106dd0375c8ecc25634c454909...ca4a034a0e012b218db8ff387b886ab1523d10c0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/6a7cb531fab0a2106dd0375c8ecc25634c454909...ca4a034a0e012b218db8ff387b886ab1523d10c0
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190527/de94837b/attachment.html>


More information about the debian-security-tracker-commits mailing list