[Git][security-tracker-team/security-tracker][master] bullseye triage

Moritz Muehlenhoff jmm at debian.org
Sun Dec 13 19:02:14 GMT 2020


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1e1ad1b6 by Moritz Mühlenhoff at 2020-12-13T20:01:56+01:00
bullseye triage

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -67066,6 +67066,7 @@ CVE-2019-20094 (An issue was discovered in libsixel 1.8.4. There is a heap-based
 	NOTE: https://github.com/saitoha/libsixel/commit/a18b3789cfd147028403c17fe79a43b169d8f034
 CVE-2019-20093 (The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo ...)
 	- libpodofo <unfixed>
+	[bullseye] - libpodofo <ignored> (Minor issue)
 	[buster] - libpodofo <ignored> (Minor issue)
 	[stretch] - libpodofo <no-dsa> (Minor issue)
 	[jessie] - libpodofo <no-dsa> (Minor issue)
@@ -91392,7 +91393,7 @@ CVE-2019-14585
 	RESERVED
 CVE-2019-14584
 	RESERVED
-	- edk2 <unfixed>
+	- edk2 <unfixed> (bug #977300)
 	[buster] - edk2 <no-dsa> (Minor issue)
 	[stretch] - edk2 <ignored> (Minor issue)
 	NOTE: https://bugzilla.tianocore.org/show_bug.cgi?id=1914
@@ -96978,7 +96979,8 @@ CVE-2019-13148 (An issue was discovered in TRENDnet TEW-827DRU firmware before 2
 	NOT-FOR-US: TRENDnet TEW-827DRU firmware
 CVE-2019-13147 (In Audio File Library (aka audiofile) 0.3.6, there exists one NULL poi ...)
 	- audiofile <unfixed> (low; bug #931343)
-	[buster] - audiofile <no-dsa> (Minor issue)
+	[bullseye] - audiofile <ignored> (Minor issue)
+	[buster] - audiofile <ignored> (Minor issue)
 	[stretch] - audiofile <no-dsa> (Minor issue)
 	[jessie] - audiofile <postponed> (Minor issue, local DoS)
 	NOTE: https://github.com/mpruett/audiofile/issues/54
@@ -103855,7 +103857,8 @@ CVE-2019-10724 (There is a vulnerability with the Dolby DAX2 API system services
 	NOT-FOR-US: Dolby
 CVE-2019-10723 (An issue was discovered in PoDoFo 0.9.6. The PdfPagesTreeCache class i ...)
 	- libpodofo <unfixed> (low; bug #926667)
-	[buster] - libpodofo <no-dsa> (Minor issue)
+	[bullseye] - libpodofo <ignored> (Minor issue)
+	[buster] - libpodofo <ignored> (Minor issue)
 	[stretch] - libpodofo <no-dsa> (Minor issue)
 	[jessie] - libpodofo <postponed> (clean exception quit/DoS, low popcon)
 	NOTE: https://sourceforge.net/p/podofo/tickets/46/



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1e1ad1b62ef838fb4e25b28e6ed3129b9c3d6005

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1e1ad1b62ef838fb4e25b28e6ed3129b9c3d6005
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201213/5f4fbc7e/attachment-0001.html>


More information about the debian-security-tracker-commits mailing list