Bug#924614: CVE-2018-20536 CVE-2018-20537 CVE-2018-20539

[Moritz Muehlenhoff]

On Fri, Mar 15, 2019 at 06:43:23AM +0100, Sebastiaan Couwenberg wrote:
> With libLAS being deprecated and in maintenance mode upstream, it will
> take some time to get fixes from upstream unless someone contributes them.
> 
> Once the fixes are available they'll be added to the Debian package.

Ack, there's all fairly harmless anyway. I've marked them as <no-dsa>
for buster, if at some point patches emerge, we can fix them post
release still

Cheers,
        Moritz