diff options
| author | Adrian Bunk <bunk@debian.org> | 2021-12-27 21:12:56 +0200 |
|---|---|---|
| committer | Adrian Bunk <bunk@debian.org> | 2021-12-27 21:12:56 +0200 |
| commit | efcc7d1500da66c87fdbe83aa4cb62728dae33e2 (patch) | |
| tree | d202ca52c0db2b12f95b4e11c4b52a1a9323e211 | |
| parent | 1c315dc1df1cbd05ce1909e86c9d7747646b00c4 (diff) | |
Reserve DLA-2855-1 for monit
| -rw-r--r-- | data/CVE/list | 2 | ||||
| -rw-r--r-- | data/DLA/list | 3 | ||||
| -rw-r--r-- | data/dla-needed.txt | 2 |
3 files changed, 3 insertions, 4 deletions
diff --git a/data/CVE/list b/data/CVE/list index 350f9d73bf..01cdb73fdc 100644 --- a/data/CVE/list +++ b/data/CVE/list @@ -174631,12 +174631,10 @@ CVE-2019-11456 (Gila CMS 1.10.1 allows fm/save CSRF for executing arbitrary PHP CVE-2019-11455 (A buffer over-read in Util_urlDecode in util.c in Tildeslash Monit bef ...) {DLA-1767-1} - monit 1:5.25.3-1 (bug #927775) - [stretch] - monit <no-dsa> (Minor issue) NOTE: https://bitbucket.org/tildeslash/monit/commits/f12d0cdb42d4e74dffe1525d4062c815c48ac57a CVE-2019-11454 (Persistent cross-site scripting (XSS) in http/cervlet.c in Tildeslash ...) {DLA-1767-1} - monit 1:5.25.3-1 (bug #927775) - [stretch] - monit <no-dsa> (Minor issue) NOTE: https://bitbucket.org/tildeslash/monit/commits/1a8295eab6815072a18019b668fe084945b751f3 NOTE: https://bitbucket.org/tildeslash/monit/commits/328f60773057641c4b2075fab9820145e95b728c CVE-2019-11453 diff --git a/data/DLA/list b/data/DLA/list index 7dba825f0a..6f53acd392 100644 --- a/data/DLA/list +++ b/data/DLA/list @@ -1,3 +1,6 @@ +[27 Dec 2021] DLA-2855-1 monit - security update + {CVE-2019-11454 CVE-2019-11455} + [stretch] - monit 1:5.20.0-6+deb9u2 [27 Dec 2021] DLA-2854-1 novnc - security update {CVE-2017-18635} [stretch] - novnc 1:0.4+dfsg+1+20131010+gitf68af8af3d-6+deb9u1 diff --git a/data/dla-needed.txt b/data/dla-needed.txt index a8956fbbb4..ae6a0d4855 100644 --- a/data/dla-needed.txt +++ b/data/dla-needed.txt @@ -71,8 +71,6 @@ linux-4.19 (Ben Hutchings) -- lxml (Utkarsh) -- -monit (Adrian Bunk) --- nvidia-graphics-drivers (Markus Koschany) NOTE: package is in non-free but also in packages-to-support NOTE: only CVE‑2021‑1076 seems to be fixed in the R390 branch used in Stretch, no fix available for CVE-2021-1077 |