[Git][security-tracker-team/security-tracker][master] Reserve DLA-2855-1 for monit

[Adrian Bunk (@bunk)]

Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker


Commits:
efcc7d15 by Adrian Bunk at 2021-12-27T21:12:56+02:00
Reserve DLA-2855-1 for monit

- - - - -


3 changed files:

- data/CVE/list
- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -174631,12 +174631,10 @@ CVE-2019-11456 (Gila CMS 1.10.1 allows fm/save CSRF for executing arbitrary PHP
 CVE-2019-11455 (A buffer over-read in Util_urlDecode in util.c in Tildeslash Monit bef ...)
 	{DLA-1767-1}
 	- monit 1:5.25.3-1 (bug #927775)
-	[stretch] - monit <no-dsa> (Minor issue)
 	NOTE: https://bitbucket.org/tildeslash/monit/commits/f12d0cdb42d4e74dffe1525d4062c815c48ac57a
 CVE-2019-11454 (Persistent cross-site scripting (XSS) in http/cervlet.c in Tildeslash  ...)
 	{DLA-1767-1}
 	- monit 1:5.25.3-1 (bug #927775)
-	[stretch] - monit <no-dsa> (Minor issue)
 	NOTE: https://bitbucket.org/tildeslash/monit/commits/1a8295eab6815072a18019b668fe084945b751f3
 	NOTE: https://bitbucket.org/tildeslash/monit/commits/328f60773057641c4b2075fab9820145e95b728c
 CVE-2019-11453


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[27 Dec 2021] DLA-2855-1 monit - security update
+	{CVE-2019-11454 CVE-2019-11455}
+	[stretch] - monit 1:5.20.0-6+deb9u2
 [27 Dec 2021] DLA-2854-1 novnc - security update
 	{CVE-2017-18635}
 	[stretch] - novnc 1:0.4+dfsg+1+20131010+gitf68af8af3d-6+deb9u1


=====================================
data/dla-needed.txt
=====================================
@@ -71,8 +71,6 @@ linux-4.19 (Ben Hutchings)
 --
 lxml (Utkarsh)
 --
-monit (Adrian Bunk)
---
 nvidia-graphics-drivers (Markus Koschany)
   NOTE: package is in non-free but also in packages-to-support
   NOTE: only CVE‑2021‑1076 seems to be fixed in the R390 branch used in Stretch, no fix available for CVE-2021-1077



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/efcc7d1500da66c87fdbe83aa4cb62728dae33e2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/efcc7d1500da66c87fdbe83aa4cb62728dae33e2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211227/43785d85/attachment.htm>