[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2020-35538,libjpeg-turbo: Buster is no-dsa

[Markus Koschany (@apo)]

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker


Commits:
48590d2c by Markus Koschany at 2022-09-04T07:43:45+02:00
CVE-2020-35538,libjpeg-turbo: Buster is no-dsa

Minor issue

- - - - -
405866c4 by Markus Koschany at 2022-09-04T07:45:18+02:00
Add libraw to dla-needed.txt

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -123577,6 +123577,7 @@ CVE-2020-35539
 	RESERVED
 CVE-2020-35538 (A crafted input file could cause a null pointer dereference in jcopy_s ...)
 	- libjpeg-turbo 1:2.0.6-1
+	[buster] - libjpeg-turbo <no-dsa> (Minor issue)
 	NOTE: https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9120a247436e84c0b4eea828cb11e8f665fcde30 (2.0.6)
 	NOTE: https://github.com/libjpeg-turbo/libjpeg-turbo/issues/441
 CVE-2020-35537 (In gcc, a crafted input source file could cause g++ to crash during co ...)


=====================================
data/dla-needed.txt
=====================================
@@ -54,6 +54,9 @@ kopanocore
   NOTE: 20220801: Programming language: C++.
   NOTE: 20220811: Proposed a patch to CVE-2022-26562 (#1016973)
 --
+libraw
+  NOTE: 20220904: Programming language C++.
+--
 linux (Ben Hutchings)
 --
 mbedtls (Utkarsh)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/d79787aa464539c746d208b2544deb9b5a598e1d...405866c445ea153a1e81487a8850953ada673c19

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/d79787aa464539c746d208b2544deb9b5a598e1d...405866c445ea153a1e81487a8850953ada673c19
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220904/b18dc078/attachment.htm>