[Git][security-tracker-team/security-tracker][master] Remove no-dsa tagged entries which got an update

Salvatore Bonaccorso carnil at debian.org
Mon Jan 20 15:17:49 GMT 2020



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d5def294 by Salvatore Bonaccorso at 2020-01-20T16:15:05+01:00
Remove no-dsa tagged entries which got an update

According to 27cacdce393d ("DLA-2072-1: fix fixed CVEs") those three
CVEs were fixed as well in the recent DLA-2072-1, thus removing the
no-dsa/postponed tags.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -24980,14 +24980,12 @@ CVE-2018-21016 (audio_sample_entry_AddBox() at isomedia/box_code_base.c in GPAC
 	- gpac <unfixed> (bug #940882)
 	[buster] - gpac <no-dsa> (Minor issue)
 	[stretch] - gpac <no-dsa> (Minor issue)
-	[jessie] - gpac <postponed> (Minor issue, local DoS in function 'mp4a_AddBox')
 	NOTE: https://github.com/gpac/gpac/issues/1180
 	NOTE: https://github.com/gpac/gpac/commit/ea13945f3c2dc2c21e30e2731bf2782384307a13
 CVE-2018-21015 (AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remot ...)
 	- gpac <unfixed> (bug #940882)
 	[buster] - gpac <no-dsa> (Minor issue)
 	[stretch] - gpac <no-dsa> (Minor issue)
-	[jessie] - gpac <postponed> (Minor issue, local DoS)
 	NOTE: https://github.com/gpac/gpac/issues/1179
 	NOTE: https://github.com/gpac/gpac/commit/0545bb0a01bfac6764c43bd5074e9c2d1eae495f
 CVE-2019-16342
@@ -33640,7 +33638,6 @@ CVE-2019-13618 (In GPAC before 0.8.0, isomedia/isom_read.c in libgpac.a has a he
 	- gpac <unfixed> (low; bug #932242)
 	[buster] - gpac <no-dsa> (Minor issue)
 	[stretch] - gpac <no-dsa> (Minor issue)
-	[jessie] - gpac <no-dsa> (Minor issue)
 	NOTE: https://github.com/gpac/gpac/issues/1250
 	NOTE: https://github.com/gpac/gpac/commit/c23d54ed15a70b4543e3191e6ead5097cda0878b
 CVE-2019-13617 (njs through 0.3.3, used in NGINX, has a heap-based buffer over-read in ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d5def2948a22bf4d3e50da1fc1fe6a9e23d9f9b2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d5def2948a22bf4d3e50da1fc1fe6a9e23d9f9b2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200120/f97ff9b2/attachment.html>


More information about the debian-security-tracker-commits mailing list