[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2021-32142 as no-dsa in buster following bullseye decision.

[Ola Lundqvist (@opal)]

Ola Lundqvist pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0a3a14f1 by Ola Lundqvist at 2023-02-22T23:25:24+01:00
CVE-2021-32142 as no-dsa in buster following bullseye decision.

- - - - -
4c11d1b6 by Ola Lundqvist at 2023-02-22T23:25:24+01:00
LTS: add mono to dla-needed.txt

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -132294,6 +132294,7 @@ CVE-2021-32142 (Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allow
 	[experimental] - libraw 0.21.1-1
 	- libraw <unfixed> (bug #1031790)
 	[bullseye] - libraw <no-dsa> (Minor issue)
+	[buster] - libraw <no-dsa> (Minor issue)
 	NOTE: https://github.com/LibRaw/LibRaw/issues/400
 	NOTE: https://github.com/LibRaw/LibRaw/commit/bc3aaf4223fdb70d52d470dae65c5a7923ea2a49 (0.21-Beta1)
 CVE-2021-32141


=====================================
data/dla-needed.txt
=====================================
@@ -151,6 +151,11 @@ man2html (gladk)
 mariadb-10.3 (Emilio)
   NOTE: 20220222: coordinating DLA with maintainer (pochu)
 --
+mono
+  NOTE: 20230222: Programming language: C.
+  NOTE: 20230222: Needs further investigation. How can a desktop definition trick software like that. (opal).
+  NOTE: 20230222: Postponed in bullseye. (opal).
+--
 netatalk
   NOTE: 20220816: Programming language: C.
   NOTE: 20220912: We get errors in the log, not present on bookworm. Needs more investigation. (stefanor)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/f4705b5844dcb08d08a31a7dfbc2d5dca138b876...4c11d1b6b531ac7cfe048852a77ea56aa1523af3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/f4705b5844dcb08d08a31a7dfbc2d5dca138b876...4c11d1b6b531ac7cfe048852a77ea56aa1523af3
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230222/e02de7fe/attachment.htm>