[Git][security-tracker-team/security-tracker][master] Reserve DLA-2824-1 for firebird3.0

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cb738231 by Sylvain Beucler at 2021-11-20T11:29:34+01:00
Reserve DLA-2824-1 for firebird3.0

- - - - -


3 changed files:

- data/CVE/list
- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -272975,7 +272975,6 @@ CVE-2017-11510 (An information leak exists in Wanscam's HW0021 network camera th
 CVE-2017-11509 (An authenticated remote attacker can execute arbitrary code in Firebir ...)
 	{DLA-2129-1 DLA-1374-1}
 	- firebird3.0 3.0.3.32900.ds4-3
-	[stretch] - firebird3.0 <postponed> (Minor issue, can be fixed along in a future update)
 	- firebird2.5 <removed>
 	NOTE: https://www.tenable.com/security/research/tra-2017-36
 	NOTE: https://github.com/FirebirdSQL/firebird/issues/5787


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[20 Nov 2021] DLA-2824-1 firebird3.0 - security update
+	{CVE-2017-11509}
+	[stretch] - firebird3.0 3.0.1.32609.ds4-14+deb9u1
 [19 Nov 2021] DLA-2823-1 salt - security update
 	{CVE-2021-21996}
 	[stretch] - salt 2016.11.2+ds-1+deb9u8


=====================================
data/dla-needed.txt
=====================================
@@ -30,10 +30,6 @@ debian-archive-keyring
 exiv2 (Thorsten Alteholz)
   NOTE: 20211109: testing package
 --
-firebird3.0 (Sylvain Beucler)
-  NOTE: 20211118: CVE-2017-11509 was fixed in firebird2.5 in wheezy (DLA-1374-1)
-  NOTE: 20211118: and jessie (DLA-2129-1) but is unfixed in firebird in stretch. (bunk)
---
 firefox-esr (Emilio)
   NOTE: 20211116: blocked on toolchain backports (pochu)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb73823153415dc3e82841f0a8fbd29f4abf7124

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb73823153415dc3e82841f0a8fbd29f4abf7124
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211120/bea45161/attachment-0001.htm>