[Git][security-tracker-team/security-tracker][master] Reserve DLA-3001-1 for libgoogle-gson-java

Dominik George (@natureshadow) natureshadow at debian.org
Fri May 13 17:49:35 BST 2022



Dominik George pushed to branch master at Debian Security Tracker / security-tracker


Commits:
19eb3c00 by Dominik George at 2022-05-13T18:49:03+02:00
Reserve DLA-3001-1 for libgoogle-gson-java

- - - - -


2 changed files:

- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[13 May 2022] DLA-3001-1 libgoogle-gson-java - security update
+	{CVE-2022-25647}
+	[stretch] - libgoogle-gson-java 2.4-1+deb9u1
 [12 May 2022] DLA-3000-1 waitress - security update
 	{CVE-2019-16785 CVE-2019-16786 CVE-2019-16789 CVE-2019-16792 CVE-2022-24761}
 	[stretch] - waitress 1.0.1-1+deb9u1


=====================================
data/dla-needed.txt
=====================================
@@ -103,8 +103,6 @@ kvmtool
   NOTE: 20220402: stretch-specific, orphaned package (Beuc)
   NOTE: 20220402: CVE-2021-45464 looks critical, check with upstream for acknowledgments/fixes (Beuc)
 --
-libgoogle-gson-java (Dominik George)
---
 liblouis
   NOTE: 20220320: no patch available yet. Reproducible memory leaks with ASAN
   NOTE: 20220320: and POC. Consider fixing CVE-2018-17294 too.



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/19eb3c00d055bd445e017f6f55e98ba98050c108

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/19eb3c00d055bd445e017f6f55e98ba98050c108
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220513/f05e96d9/attachment.htm>


More information about the debian-security-tracker-commits mailing list