[Git][security-tracker-team/security-tracker][master] Reserve DLA-2854-1 for novnc

[Utkarsh Gupta (@utkarsh)]

Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5c20fed3 by Utkarsh Gupta at 2021-12-27T22:39:47+05:30
Reserve DLA-2854-1 for novnc

- - - - -


3 changed files:

- data/CVE/list
- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -156919,7 +156919,6 @@ CVE-2019-16889 (Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to
 CVE-2017-18635 (An XSS vulnerability was discovered in noVNC before 0.6.2 in which the ...)
 	{DLA-1946-1}
 	- novnc 1:1.0.0-1
-	[stretch] - novnc <no-dsa> (Minor issue)
 	NOTE: https://bugs.launchpad.net/horizon/+bug/1656435
 	NOTE: https://github.com/novnc/noVNC/commit/6048299a138e078aed210f163111698c8c526a13#diff-286f7dc7b881e942e97cd50c10898f03L534
 	NOTE: https://github.com/novnc/noVNC/issues/748


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[27 Dec 2021] DLA-2854-1 novnc - security update
+	{CVE-2017-18635}
+	[stretch] - novnc 1:0.4+dfsg+1+20131010+gitf68af8af3d-6+deb9u1
 [27 Dec 2021] DLA-2853-1 ruby2.3 - security update
 	{CVE-2021-41817 CVE-2021-41819}
 	[stretch] - ruby2.3 2.3.3-1+deb9u11


=====================================
data/dla-needed.txt
=====================================
@@ -73,10 +73,6 @@ lxml (Utkarsh)
 --
 monit (Adrian Bunk)
 --
-novnc (Utkarsh)
-  NOTE: 20211227: CVE-2017-18635 was fixed in jessie in DLA-1946-1
-  NOTE: 20211227: but is unfixed in stretch (bunk)
---
 nvidia-graphics-drivers (Markus Koschany)
   NOTE: package is in non-free but also in packages-to-support
   NOTE: only CVE‑2021‑1076 seems to be fixed in the R390 branch used in Stretch, no fix available for CVE-2021-1077



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5c20fed30b1fcfbe39c0d17ef19289eb397b2a2b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5c20fed30b1fcfbe39c0d17ef19289eb397b2a2b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211227/79b94744/attachment.htm>