[Git][security-tracker-team/security-tracker][master] Reserve DLA-4001-1 for libxstream-java

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
790c10f5 by Bastien Roucariès at 2024-12-21T22:01:39+00:00
Reserve DLA-4001-1 for libxstream-java

- - - - -


3 changed files:

- data/CVE/list
- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -250006,7 +250006,6 @@ CVE-2021-43860 (Flatpak is a Linux application sandboxing and distribution frame
 CVE-2021-43859 (XStream is an open source java library to serialize objects to XML and ...)
 	{DLA-2924-1}
 	- libxstream-java 1.4.19-1
-	[bullseye] - libxstream-java <no-dsa> (Minor issue)
 	[buster] - libxstream-java <no-dsa> (Minor issue)
 	NOTE: https://github.com/x-stream/xstream/security/advisories/GHSA-rmr5-cpv2-vgjf
 	NOTE: https://x-stream.github.io/CVE-2021-43859.html


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[21 Dec 2024] DLA-4001-1 libxstream-java - security update
+	{CVE-2021-43859}
+	[bullseye] - libxstream-java 1.4.15-3+deb11u3
 [21 Dec 2024] DLA-4000-1 sqlparse - security update
 	{CVE-2021-32839 CVE-2023-30608 CVE-2024-4340}
 	[bullseye] - sqlparse 0.4.1-1+deb11u1


=====================================
data/dla-needed.txt
=====================================
@@ -119,9 +119,6 @@ jetty9
 knot-resolver
   NOTE: 20240924: Added by Front-Desk (lamby)
 --
-libxstream-java (rouca)
-  NOTE: 20241110: Added by Front-Desk (apo)
---
 linux (Ben Hutchings)
   NOTE: 20230111: Perma-added, Linux package specifically delegated to bwh (LTS Team)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/790c10f5d878d5e9e086847f6c57e6fabfea3ef0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/790c10f5d878d5e9e086847f6c57e6fabfea3ef0
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241221/91597bce/attachment-0001.htm>