[Git][security-tracker-team/security-tracker][master] 2 commits: mark CVE-2020-27746 and CVE-2020-27745 as no-dsa for Stretch

[Thorsten Alteholz]

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b453ab5e by Thorsten Alteholz at 2020-11-14T17:10:37+01:00
mark CVE-2020-27746 and CVE-2020-27745 as no-dsa for Stretch

- - - - -
a3cd4435 by Thorsten Alteholz at 2020-11-14T17:11:47+01:00
add libhibernate3-java

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -4727,12 +4727,14 @@ CVE-2020-27747 (An issue was discovered in Click Studios Passwordstate 8.9 (Buil
 CVE-2020-27746 [X11 forwarding - avoid unsafe use of magic cookie as arg to xauth command]
 	RESERVED
 	- slurm-llnl <unfixed> (bug #974722)
+	[stretch] - slurm-llnl <no-dsa> (Minor issue)
 	NOTE: https://www.schedmd.com/news.php?id=240
 	NOTE: https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html
 	NOTE: https://github.com/SchedMD/slurm/commit/07309deb45c33e735e191faf9dd31cca1054a15c
 CVE-2020-27745 [PMIx - fix potential buffer overflows from use of unpackmem()]
 	RESERVED
 	- slurm-llnl <unfixed> (bug #974721)
+	[stretch] - slurm-llnl <no-dsa> (Minor issue)
 	NOTE: https://www.schedmd.com/news.php?id=240
 	NOTE: https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html
 	NOTE: https://github.com/SchedMD/slurm/commit/c3142dd87e06621ff148791c3d2f298b5c0b3a81


=====================================
data/dla-needed.txt
=====================================
@@ -61,6 +61,8 @@ lemonldap-ng (Utkarsh)
 --
 libdatetime-timezone-perl (Adrian Bunk)
 --
+libhibernate3-java
+--
 libvncserver (Thorsten Alteholz)
 --
 linux (Ben Hutchings)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/3db8fa408a60e1c6cec3e0c01c5125defb3677d1...a3cd44355f36f1c454836e1f0e499d2437619a74

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/3db8fa408a60e1c6cec3e0c01c5125defb3677d1...a3cd44355f36f1c454836e1f0e499d2437619a74
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201114/e239c55a/attachment.html>