[Git][security-tracker-team/security-tracker][master] Reserve DSA number for expat update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0c2460c5 by Salvatore Bonaccorso at 2022-02-12T14:24:53+01:00
Reserve DSA number for expat update

- - - - -


3 changed files:

- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -9131,8 +9131,6 @@ CVE-2022-0080 (mruby is vulnerable to Heap-based Buffer Overflow ...)
 CVE-2021-45960 (In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) pla ...)
 	{DLA-2904-1}
 	- expat 2.4.3-1 (bug #1002994)
-	[bullseye] - expat <no-dsa> (Minor issue; can be fixed via point release)
-	[buster] - expat <no-dsa> (Minor issue; can be fixed via point release)
 	NOTE: https://github.com/libexpat/libexpat/issues/531
 	NOTE: https://github.com/libexpat/libexpat/pull/534
 	NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/0adcb34c49bee5b19bd29b16a578c510c23597ea (R_2_4_3)


=====================================
data/DSA/list
=====================================
@@ -1,3 +1,7 @@
+[12 Feb 2022] DSA-5073-1 expat - security update
+	{CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827 CVE-2022-23852 CVE-2022-23990}
+	[buster] - expat 2.2.6-2+deb10u2
+	[bullseye] - expat 2.2.10-2+deb11u1
 [11 Feb 2022] DSA-5072-1 debian-edu-config - security update
 	{CVE-2021-20001}
 	[buster] - debian-edu-config 2.10.65+deb10u8


=====================================
data/dsa-needed.txt
=====================================
@@ -16,8 +16,6 @@ asterisk/oldstable
 --
 condor
 --
-expat (carnil)
---
 faad2/oldstable (jmm)
 --
 librecad



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0c2460c5ed6cb1556b04c2ffcf06a62185719547

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0c2460c5ed6cb1556b04c2ffcf06a62185719547
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220212/fd52475e/attachment.htm>