[Git][security-tracker-team/security-tracker][master] Reserve DLA-2872-1 for agg
Adrian Bunk (@bunk)
bunk at debian.org
Thu Dec 30 22:14:18 GMT 2021
Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker
Commits:
f63919cc by Adrian Bunk at 2021-12-31T00:14:02+02:00
Reserve DLA-2872-1 for agg
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -190342,7 +190342,6 @@ CVE-2019-6246 (An issue was discovered in SVG++ (aka svgpp) 1.2.3. After calling
CVE-2019-6245 (An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SV ...)
{DLA-1656-1}
- agg 1:2.4-r127+dfsg1-1 (low; bug #919322)
- [stretch] - agg <no-dsa> (Minor issue)
- svgpp <unfixed> (unimportant; bug #919321)
NOTE: https://github.com/svgpp/svgpp/issues/70
NOTE: Fixed in src:agg with: https://sourceforge.net/p/agg/svn/119/
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[31 Dec 2021] DLA-2872-1 agg - security update
+ {CVE-2019-6245}
+ [stretch] - agg 2.5+dfsg1-11+deb9u1
[30 Dec 2021] DLA-2871-1 lxml - security update
{CVE-2021-43818}
[stretch] - lxml 3.7.1-1+deb9u5
=====================================
data/dla-needed.txt
=====================================
@@ -12,8 +12,6 @@ https://wiki.debian.org/LTS/Development#Triage_new_security_issues
To make it easier to see the entire history of an update, please append notes
rather than remove/replace existing ones.
---
-agg (Adrian Bunk)
--
ansible (Lee Garrett)
NOTE: 20210411: As discussed with the maintainer I will update Buster first and
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f63919cc030357a4ec8e205785cba7d3e87ec54d
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f63919cc030357a4ec8e205785cba7d3e87ec54d
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211230/abccb694/attachment.htm>
More information about the debian-security-tracker-commits
mailing list