[Git][security-tracker-team/security-tracker][master] Reserve DLA-2829-1 for libvpx

[Adrian Bunk (@bunk)]

Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d05d9eb4 by Adrian Bunk at 2021-11-27T23:04:53+02:00
Reserve DLA-2829-1 for libvpx

- - - - -


3 changed files:

- data/CVE/list
- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -148189,7 +148189,6 @@ CVE-2020-0035 (In query of TelephonyProvider.java, there is a possible access to
 CVE-2020-0034 (In vp8_decode_frame of decodeframe.c, there is a possible out of bound ...)
 	{DLA-2136-1}
 	- libvpx 1.7.0-3
-	[stretch] - libvpx <no-dsa> (Minor issue)
 	NOTE: https://github.com/webmproject/libvpx/commit/45daecb4f73a47ab3236a29a3a48c52324cbf19a
 CVE-2020-0033 (In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out  ...)
 	NOT-FOR-US: Android media framework


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[27 Nov 2021] DLA-2829-1 libvpx - security update
+	{CVE-2020-0034}
+	[stretch] - libvpx 1.6.1-3+deb9u3
 [27 Nov 2021] DLA-2828-1 libvorbis - security update
 	{CVE-2017-14160 CVE-2018-10392 CVE-2018-10393}
 	[stretch] - libvorbis 1.3.5-4+deb9u3


=====================================
data/dla-needed.txt
=====================================
@@ -64,8 +64,6 @@ libssh2 (Ola Lundqvist)
   NOTE: 20211031: but still need fixing in stretch and buster. (bunk)
   NOTE: 20211116: Work in progress for stretch. (ola)
 --
-libvpx (Adrian Bunk)
---
 linux (Ben Hutchings)
 --
 linux-4.19 (Ben Hutchings)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d05d9eb457655b451d1d12d3c28deb643aced3ff

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d05d9eb457655b451d1d12d3c28deb643aced3ff
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211127/1b71d174/attachment-0001.htm>