[Git][security-tracker-team/security-tracker][master] Reserve DLA-3590-1 for python-reportlab

[Guilhem Moulin (@guilhem)]

Guilhem Moulin pushed to branch master at Debian Security Tracker / security-tracker


Commits:
93f732af by Guilhem Moulin at 2023-09-29T21:45:12+02:00
Reserve DLA-3590-1 for python-reportlab

- - - - -


3 changed files:

- data/CVE/list
- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -207739,7 +207739,6 @@ CVE-2020-28464 (This affects the package djv before 2.1.4. By controlling the sc
 	NOT-FOR-US: Node djv
 CVE-2020-28463 (All versions of package reportlab are vulnerable to Server-side Reques ...)
 	- python-reportlab 3.5.55-1
-	[buster] - python-reportlab <no-dsa> (Minor issue)
 	[stretch] - python-reportlab <postponed> (Can be fixed in next DLA)
 	NOTE: https://snyk.io/vuln/SNYK-PYTHON-REPORTLAB-1022145
 	NOTE: Fixed by: https://hg.reportlab.com/hg-public/reportlab/rev/7f2231703dc7


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[29 Sep 2023] DLA-3590-1 python-reportlab - security update
+	{CVE-2019-19450 CVE-2020-28463}
+	[buster] - python-reportlab 3.5.13-1+deb10u2
 [29 Sep 2023] DLA-3589-1 python-git - security update
 	{CVE-2023-41040}
 	[buster] - python-git 2.1.11-1+deb10u2


=====================================
data/dla-needed.txt
=====================================
@@ -177,9 +177,6 @@ python-os-brick
   NOTE: 20230525: Added by Front-Desk (lamby)
   NOTE: 20230525: NB. CVE-2023-2088 filed against python-glance-store, python-os-brick, nova and cinder.
 --
-python-reportlab (guilhem)
-  NOTE: 20230926: Added by Front-Desk (ola)
---
 qemu (Sean Whitton)
   NOTE: 20230924: Added by Front-Desk (apo)
   NOTE: 20230924: Consider fixing postponed issues as well. (apo)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/93f732afe09a0fb00d1a71e89ee712fd82613d54

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/93f732afe09a0fb00d1a71e89ee712fd82613d54
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230929/52d38e94/attachment-0001.htm>