[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2022-3554 & CVE-2022-3555/libx11 postponed on buster

[Emilio Pozuelo Monfort (@pochu)]

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker


Commits:
865ee048 by Emilio Pozuelo Monfort at 2022-10-24T00:11:49+02:00
CVE-2022-3554 & CVE-2022-3555/libx11 postponed on buster

- - - - -
d3f7d750 by Emilio Pozuelo Monfort at 2022-10-24T00:13:53+02:00
lts: take xorg-server

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -1660,10 +1660,12 @@ CVE-2022-3556
 CVE-2022-3555 (A vulnerability was found in X.org libX11 and classified as problemati ...)
 	- libx11 2:1.7.4-1
 	[bullseye] - libx11 <no-dsa> (Minor issue)
+	[buster] - libx11 <postponed> (Minor issue)
 	NOTE: https://gitlab.freedesktop.org/xorg/lib/libx11/commit/8a368d808fec166b5fb3dfe6312aab22c7ee20af (libX11-1.7.4)
 CVE-2022-3554 (A vulnerability has been found in X.org libX11 and classified as probl ...)
 	- libx11 <unfixed>
 	[bullseye] - libx11 <no-dsa> (Minor issue)
+	[buster] - libx11 <postponed> (Minor issue)
 	NOTE: https://gitlab.freedesktop.org/xorg/lib/libx11/commit/1d11822601fd24a396b354fa616b04ed3df8b4ef
 CVE-2022-3553 (A vulnerability, which was classified as problematic, was found in X.o ...)
 	- xorg-server 2:21.1.4-1 (unimportant)


=====================================
data/dla-needed.txt
=====================================
@@ -213,6 +213,8 @@ wireshark
 wkhtmltopdf
   NOTE: 20220904: Programming language: C++.
 --
+xorg-server (Emilio)
+--
 zabbix
   NOTE: 20220911: At least CVE-2022-23134 was fixed in stretch so it should be fixed in buster too.
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/aa9dbf4d14f88227758d1338aaf140b957a7c679...d3f7d750bee1268f1a2021c0b9e4297da94dd689

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/aa9dbf4d14f88227758d1338aaf140b957a7c679...d3f7d750bee1268f1a2021c0b9e4297da94dd689
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221023/c34ba0ef/attachment.htm>