[Git][security-tracker-team/security-tracker][master] LTS: mark CVE-2019-20629/gpac as <not-affected> for stretch and buster
    Roberto C. Sánchez (@roberto) 
    roberto at debian.org
       
    Fri Jan  7 21:24:29 GMT 2022
    
    
  
Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker
Commits:
1259ada1 by Roberto C. Sánchez at 2022-01-07T16:23:09-05:00
LTS: mark CVE-2019-20629/gpac as <not-affected> for stretch and buster
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -124531,11 +124531,12 @@ CVE-2019-20630 (An issue was discovered in libgpac.a in GPAC before 0.8.0, as de
 	NOTE: https://github.com/gpac/gpac/issues/1268
 CVE-2019-20629 (An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstr ...)
 	- gpac 1.0.1+dfsg1-2 (bug #972053)
-	[buster] - gpac <no-dsa> (Minor issue)
-	[stretch] - gpac <no-dsa> (Minor issue)
+	[buster] - gpac <not-affected> (Vulnerable code introduced later, in version 0.8.0)
+	[stretch] - gpac <not-affected> (Vulnerable code introduced later, in version 0.8.0)
 	[jessie] - gpac <ignored> (Minor issue)
 	NOTE: https://github.com/gpac/gpac/commit/2320eb73afba753b39b7147be91f7be7afc0eeb7
 	NOTE: https://github.com/gpac/gpac/issues/1264
+	NOTE: Introduced by https://github.com/gpac/gpac/commit/bb002ad4f92d216f8ab7c8466102279ef8af6f88
 CVE-2019-20628 (An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstr ...)
 	- gpac 1.0.1+dfsg1-2 (bug #972053)
 	[buster] - gpac <no-dsa> (Minor issue)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1259ada10a08675d647e4451a63e86ca19450eb5
-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1259ada10a08675d647e4451a63e86ca19450eb5
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220107/5557915b/attachment.htm>
    
    
More information about the debian-security-tracker-commits
mailing list