[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage exiv2 for buster LTS (CVE-2020-19716)

Chris Lamb (@lamby) lamby at debian.org
Fri Aug 19 20:45:49 BST 2022



Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e695a8b5 by Chris Lamb at 2022-08-19T12:45:40-07:00
data/dla-needed.txt: Triage exiv2 for buster LTS (CVE-2020-19716)

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -29,6 +29,10 @@ asterisk (Markus Koschany)
 curl (Markus Koschany)
   NOTE: 20220802: Programming language: C.
 --
+exiv2
+  NOTE: 20220819: Programming language: C++.
+  NOTE: 20220819: https://github.com/Exiv2/exiv2/commit/109d5df7abd329f141b500c92a00178d35a6bef3#diff-bd28aafd4c87975a3a236af74c2200db447587fa0bb4f43ba9beb98738c77b2aL292 does not directly apply, but a very quick glance suggests the earlier code may be equally vulnerable. (Chris Lamb)
+--
 jetty9 (Markus Koschany)
   NOTE: 20220802: Programming language: Java.
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e695a8b51235f329adfb5a220f2b5894154c1bff

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e695a8b51235f329adfb5a220f2b5894154c1bff
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220819/1bc0af93/attachment.htm>


More information about the debian-security-tracker-commits mailing list