[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2024-25710,libcommons-compress-java: buster is no-dsa

[Markus Koschany (@apo)]

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cb11667d by Markus Koschany at 2024-03-19T21:22:18+01:00
CVE-2024-25710,libcommons-compress-java: buster is no-dsa

Minor issue

- - - - -
961b664a by Markus Koschany at 2024-03-19T21:22:58+01:00
Remove libcommons-compress-java from dla-needed.txt

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -8042,6 +8042,7 @@ CVE-2024-25710 (Loop with Unreachable Exit Condition ('Infinite Loop') vulnerabi
 	- libcommons-compress-java <unfixed> (bug #1064413)
 	[bookworm] - libcommons-compress-java <no-dsa> (Minor issue)
 	[bullseye] - libcommons-compress-java <no-dsa> (Minor issue)
+	[buster] - libcommons-compress-java <no-dsa> (Minor issue)
 	NOTE: https://www.openwall.com/lists/oss-security/2024/02/19/1
 	NOTE: Related to and fixed by https://issues.apache.org/jira/browse/COMPRESS-632
 CVE-2024-23114 (Deserialization of Untrusted Data vulnerability in Apache Camel Cassan ...)


=====================================
data/dla-needed.txt
=====================================
@@ -118,9 +118,6 @@ knot-resolver
   NOTE: 20240310: Dropped from dla-needed.txt (ola/front-desk)
   NOTE: 20240311: Reverted decision to remove from dla-needed since four CVEs has been fixed in bullseye. (ola)
 --
-libcommons-compress-java
-  NOTE: 20240303: Added by Front-Desk (apo)
---
 libpgjava
   NOTE: 20240308: Added by Front-Desk (opal)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/bd90f1b2a8b6cf8b3a08366cb04f7a4b1430f3d0...961b664ae9d8f873cdba0cca9aceb7f760a69ac6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/bd90f1b2a8b6cf8b3a08366cb04f7a4b1430f3d0...961b664ae9d8f873cdba0cca9aceb7f760a69ac6
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240319/f4309eed/attachment-0001.htm>