[Git][security-tracker-team/security-tracker][master] 3 commits: mark CVE-2020-24616 as no-dsa for Stretch

[Thorsten Alteholz]

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ede8f02f by Thorsten Alteholz at 2020-08-27T22:55:04+02:00
mark CVE-2020-24616 as no-dsa for Stretch

- - - - -
e8ba79d8 by Thorsten Alteholz at 2020-08-27T22:55:04+02:00
add xorg-server

- - - - -
e1a25dbe by Thorsten Alteholz at 2020-08-27T22:55:05+02:00
mark CVE-2020-17376 as no-dsa for Stretch

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -206,6 +206,7 @@ CVE-2020-24617
 CVE-2020-24616 (FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interact ...)
 	- jackson-databind <unfixed>
 	[buster] - jackson-databind <no-dsa> (Minor issue)
+	[stretch] - jackson-databind <no-dsa> (Minor issue)
 	NOTE: https://github.com/FasterXML/jackson-databind/issues/2814
 	NOTE: Starting from 2.10 series mitigated as Safe Default Typing is enabled by default
 	NOTE: but still an issue when Default Typing is enabled.
@@ -14773,6 +14774,7 @@ CVE-2020-17377
 CVE-2020-17376 (An issue was discovered in Guest.migrate in virt/libvirt/guest.py in O ...)
 	- nova 2:21.1.0-1 (bug #969052)
 	[buster] - nova <no-dsa> (Minor issue)
+	[stretch] - nova <no-dsa> (Minor issue)
 	NOTE: https://launchpad.net/bugs/1890501
 	NOTE: https://www.openwall.com/lists/oss-security/2020/08/25/4
 CVE-2020-17375


=====================================
data/dla-needed.txt
=====================================
@@ -212,3 +212,5 @@ xcftools
   NOTE: 20200523: Proposed fix https://github.com/j-jorge/xcftools/pull/15 (gladk)
   NOTE: 20200605: Patch https://salsa.debian.org/lts-team/packages/xcftools/-/blob/fix/test-CVE-2019-5087/debian/patches/CVE-2019-5087.patch (gladk)
 --
+xorg-server (Thorsten Alteholz)
+--



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/eb4844a722fb8704080ca2aa69e6f740145133d6...e1a25dbe8ce26e4e865fc80049fe79295442e9e5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/eb4844a722fb8704080ca2aa69e6f740145133d6...e1a25dbe8ce26e4e865fc80049fe79295442e9e5
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200827/53a6bfde/attachment.html>