[Git][security-tracker-team/security-tracker][master] Reserve DLA-3001-1 for libgoogle-gson-java
Dominik George (@natureshadow)
natureshadow at debian.org
Fri May 13 17:49:35 BST 2022
Dominik George pushed to branch master at Debian Security Tracker / security-tracker
Commits:
19eb3c00 by Dominik George at 2022-05-13T18:49:03+02:00
Reserve DLA-3001-1 for libgoogle-gson-java
- - - - -
2 changed files:
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[13 May 2022] DLA-3001-1 libgoogle-gson-java - security update
+ {CVE-2022-25647}
+ [stretch] - libgoogle-gson-java 2.4-1+deb9u1
[12 May 2022] DLA-3000-1 waitress - security update
{CVE-2019-16785 CVE-2019-16786 CVE-2019-16789 CVE-2019-16792 CVE-2022-24761}
[stretch] - waitress 1.0.1-1+deb9u1
=====================================
data/dla-needed.txt
=====================================
@@ -103,8 +103,6 @@ kvmtool
NOTE: 20220402: stretch-specific, orphaned package (Beuc)
NOTE: 20220402: CVE-2021-45464 looks critical, check with upstream for acknowledgments/fixes (Beuc)
--
-libgoogle-gson-java (Dominik George)
---
liblouis
NOTE: 20220320: no patch available yet. Reproducible memory leaks with ASAN
NOTE: 20220320: and POC. Consider fixing CVE-2018-17294 too.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/19eb3c00d055bd445e017f6f55e98ba98050c108
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/19eb3c00d055bd445e017f6f55e98ba98050c108
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220513/f05e96d9/attachment.htm>
More information about the debian-security-tracker-commits
mailing list