[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2016-9928 is fixed in mcabber

Thorsten Alteholz alteholz at debian.org
Sun Jun 28 16:00:41 BST 2020



Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f12bd738 by Thorsten Alteholz at 2020-06-28T17:00:00+02:00
CVE-2016-9928 is fixed in mcabber

- - - - -
977c1098 by Thorsten Alteholz at 2020-06-28T17:00:27+02:00
Reserve DLA-2260-1 for mcabber

- - - - -


2 changed files:

- data/CVE/list
- data/DLA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -201660,7 +201660,6 @@ CVE-2016-9444 (named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, a
 CVE-2016-9928 (MCabber before 1.0.4 is vulnerable to roster push attacks, which allow ...)
 	{DLA-724-1}
 	- mcabber 0.10.2-1.1 (bug #845258)
-	[jessie] - mcabber <no-dsa> (Minor issue)
 	NOTE: https://bitbucket.org/McKael/mcabber-crew/commits/6e1ead98930d7dd0a520ad17c720ae4908429033/raw
 	NOTE: Similar issue for mcabber as for gajim in CVE-2015-8688
 	NOTE: http://www.openwall.com/lists/oss-security/2016/12/09/5


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[28 Jun 2020] DLA-2260-1 mcabber - security update
+	{CVE-2016-9928}
+	[jessie] - mcabber 0.10.2-1+deb8u1
 [28 Jun 2020] DLA-2259-1 picocom - security update
 	{CVE-2015-9059}
 	[jessie] - picocom 1.7-1+deb8u1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/64c05614ebf0d4037c24075fb0ae9b3389e20cef...977c10988ac8f4e8884b891dbc7be4901f83bbfa

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/64c05614ebf0d4037c24075fb0ae9b3389e20cef...977c10988ac8f4e8884b891dbc7be4901f83bbfa
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200628/085c1d1d/attachment.html>


More information about the debian-security-tracker-commits mailing list