[Git][security-tracker-team/security-tracker][master] Revert "Mark CVE-2019-6245 and CVE-2019-6247 as fixed in 1.3.0+dfsg1-5"

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Mar 31 22:24:28 BST 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1c96651f by Salvatore Bonaccorso at 2023-03-31T23:23:10+02:00
Revert "Mark CVE-2019-6245 and CVE-2019-6247 as fixed in 1.3.0+dfsg1-5"

This reverts commit de9e9f62f0570a51ec50f6c799d1e3981cede0c7.

See the CVE notes and ed43841f38719e4bc2339a4b3daf89f5bf9b47a7 .

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -294046,7 +294046,7 @@ CVE-2019-6248 (PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script
 	NOT-FOR-US: PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script
 CVE-2019-6247 (An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SV ...)
 	{DLA-3376-1}
-	- svgpp 1.3.0+dfsg1-5 (unimportant; bug #919321)
+	- svgpp <unfixed> (unimportant; bug #919321)
 	NOTE: https://github.com/svgpp/svgpp/issues/70
 	NOTE: Issue only in src:svgpp which does not call the AGG-API in correct way.
 	NOTE: No security impact, only used to build examples, see #921097
@@ -294056,7 +294056,7 @@ CVE-2019-6246 (An issue was discovered in SVG++ (aka svgpp) 1.2.3. After calling
 CVE-2019-6245 (An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SV ...)
 	{DLA-3376-1 DLA-2872-1 DLA-1656-1}
 	- agg 1:2.4-r127+dfsg1-1 (low; bug #919322)
-	- svgpp 1.3.0+dfsg1-5 (unimportant; bug #919321)
+	- svgpp <unfixed> (unimportant; bug #919321)
 	NOTE: https://github.com/svgpp/svgpp/issues/70
 	NOTE: Fixed in src:agg with: https://sourceforge.net/p/agg/svn/119/
 	NOTE: and possibly already fixed with the inclusion of 05-fix-recursion-crash.patch



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1c96651f37ea6acdc3334a5d980780d61119facf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1c96651f37ea6acdc3334a5d980780d61119facf
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230331/c2b5130a/attachment.htm>


More information about the debian-security-tracker-commits mailing list