[Git][security-tracker-team/security-tracker][master] 2 commits: fix missing only for Jessie, so this will be done now ...

[Thorsten Alteholz]

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0d610547 by Thorsten Alteholz at 2020-04-25T23:05:38+02:00
fix missing only for Jessie, so this will be done now ...

- - - - -
0dcb414d by Thorsten Alteholz at 2020-04-25T23:05:38+02:00
Reserve DLA-2186-1 for ncmpc

- - - - -


2 changed files:

- data/CVE/list
- data/DLA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -115011,7 +115011,6 @@ CVE-2018-9234 (GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which k
 CVE-2018-9240 (ncmpc through 0.29 is prone to a NULL pointer dereference flaw. If a u ...)
 	- ncmpc 0.33-1 (low; bug #894724)
 	[stretch] - ncmpc 0.25-0.1+deb9u1
-	[jessie] - ncmpc <no-dsa> (Minor issue)
 	[wheezy] - ncmpc <no-dsa> (Minor issue)
 CVE-2018-9233 (Sophos Endpoint Protection 10.7 uses an unsalted SHA-1 hash for passwo ...)
 	NOT-FOR-US: Sophos


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[25 Apr 2020] DLA-2186-1 ncmpc - security update
+	{CVE-2018-9240}
+	[jessie] - ncmpc 0.24-1+deb8u1
 [25 Apr 2020] DLA-2185-1 eog - security update
 	{CVE-2016-6855}
 	[jessie] - eog 3.14.1-1+deb8u1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/cb69ab274315deb3e47ea2ebebd4cb672cffb6c4...0dcb414ddc57aaf95fedabc0349018a4bfe277b4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/cb69ab274315deb3e47ea2ebebd4cb672cffb6c4...0dcb414ddc57aaf95fedabc0349018a4bfe277b4
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200425/37a55a0d/attachment.html>