[Git][security-tracker-team/security-tracker][master] Reserve DLA-3188-1 for sysstat

[Utkarsh Gupta (@utkarsh)]

Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker


Commits:
da0c300f by Utkarsh Gupta at 2022-11-14T03:18:18+05:30
Reserve DLA-3188-1 for sysstat

- - - - -


3 changed files:

- data/CVE/list
- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -231134,7 +231134,6 @@ CVE-2019-16169
 	RESERVED
 CVE-2019-16167 (sysstat before 12.1.6 has memory corruption due to an Integer Overflow ...)
 	- sysstat 12.1.7-1 (bug #939914)
-	[buster] - sysstat <no-dsa> (Minor issue, can be fixed via point release)
 	[stretch] - sysstat <not-affected> (Vulnerable code introduced later)
 	[jessie] - sysstat <not-affected> (Vulnerable code introduced later)
 	NOTE: https://github.com/sysstat/sysstat/issues/230


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[14 Nov 2022] DLA-3188-1 sysstat - security update
+	{CVE-2019-16167 CVE-2019-19725 CVE-2022-39377}
+	[buster] - sysstat 12.0.3-2+deb10u1
 [14 Nov 2022] DLA-3187-1 dropbear - security update
 	{CVE-2021-36369}
 	[buster] - dropbear 2018.76-5+deb10u2


=====================================
data/dla-needed.txt
=====================================
@@ -357,10 +357,6 @@ sox
   NOTE: 20220818: Requires some investigation; see #1012138 etc.
   NOTE: 20221003: https://sourceforge.net/p/sox/bugs/362/ Re-pinged upstream committer (abhijith)
 --
-sysstat
-  NOTE: 20221112: Programming language: C.
-  NOTE: 20221112: 1 new and 1 old pending CVE to fix (Beuc/front-desk)
---
 tiff
   NOTE: 20221031: Programming language: C.
   NOTE: 20221031: VCS: https://salsa.debian.org/lts-team/packages/tiff.git



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/da0c300f568c24d3cb40e047ea4802c4604cfbe3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/da0c300f568c24d3cb40e047ea4802c4604cfbe3
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221113/6fe05c24/attachment.htm>