summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorUtkarsh Gupta <utkarsh@debian.org>2022-11-14 03:18:18 +0530
committerUtkarsh Gupta <utkarsh@debian.org>2022-11-14 03:18:18 +0530
commitda0c300f568c24d3cb40e047ea4802c4604cfbe3 (patch)
tree93f5099ab2cf18d71c67df6b2e261cf925a72159
parent08a0762079e8baca81c4569ecf338da245e0e235 (diff)
Reserve DLA-3188-1 for sysstat
-rw-r--r--data/CVE/list1
-rw-r--r--data/DLA/list3
-rw-r--r--data/dla-needed.txt4
3 files changed, 3 insertions, 5 deletions
diff --git a/data/CVE/list b/data/CVE/list
index c6b07f7fd8..e27699da28 100644
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -231134,7 +231134,6 @@ CVE-2019-16169
RESERVED
CVE-2019-16167 (sysstat before 12.1.6 has memory corruption due to an Integer Overflow ...)
- sysstat 12.1.7-1 (bug #939914)
- [buster] - sysstat <no-dsa> (Minor issue, can be fixed via point release)
[stretch] - sysstat <not-affected> (Vulnerable code introduced later)
[jessie] - sysstat <not-affected> (Vulnerable code introduced later)
NOTE: https://github.com/sysstat/sysstat/issues/230
diff --git a/data/DLA/list b/data/DLA/list
index 4686abd9cd..7fbf86ecfd 100644
--- a/data/DLA/list
+++ b/data/DLA/list
@@ -1,3 +1,6 @@
+[14 Nov 2022] DLA-3188-1 sysstat - security update
+ {CVE-2019-16167 CVE-2019-19725 CVE-2022-39377}
+ [buster] - sysstat 12.0.3-2+deb10u1
[14 Nov 2022] DLA-3187-1 dropbear - security update
{CVE-2021-36369}
[buster] - dropbear 2018.76-5+deb10u2
diff --git a/data/dla-needed.txt b/data/dla-needed.txt
index a187e0d0ec..8109edb990 100644
--- a/data/dla-needed.txt
+++ b/data/dla-needed.txt
@@ -357,10 +357,6 @@ sox
NOTE: 20220818: Requires some investigation; see #1012138 etc.
NOTE: 20221003: https://sourceforge.net/p/sox/bugs/362/ Re-pinged upstream committer (abhijith)
--
-sysstat
- NOTE: 20221112: Programming language: C.
- NOTE: 20221112: 1 new and 1 old pending CVE to fix (Beuc/front-desk)
---
tiff
NOTE: 20221031: Programming language: C.
NOTE: 20221031: VCS: https://salsa.debian.org/lts-team/packages/tiff.git

© 2014-2024 Faster IT GmbH | imprint | privacy policy