diff options
Diffstat (limited to 'data')
| -rw-r--r-- | data/CVE/list | 12 | ||||
| -rw-r--r-- | data/DSA/list | 3 | ||||
| -rw-r--r-- | data/dsa-needed.txt | 2 |
3 files changed, 9 insertions, 8 deletions
diff --git a/data/CVE/list b/data/CVE/list index 4d372c40de..432bbc4d2b 100644 --- a/data/CVE/list +++ b/data/CVE/list @@ -8793,7 +8793,7 @@ CVE-2020-12059 (An issue was discovered in Ceph through 13.2.9. A POST request w NOTE: Fixed by: https://github.com/ceph/ceph/commit/375d926a4f2720a29b079c216bafb884eef985c3 (v13.2.10) NOTE: Consider 14.x series as fixed due to the use of the new style xml parsing. CVE-2019-20787 (Teeworlds before 0.7.4 has an integer overflow when computing a tilema ...) - NOTE: Duplicate of CVE-2019-10877, requested rejection + NOTE: Duplicate of CVE-2019-10877 CVE-2020-12058 RESERVED CVE-2020-12057 @@ -79134,13 +79134,13 @@ CVE-2015-9281 (Logon Manager in SAS Web Infrastructure Platform before 9.4M3 all NOT-FOR-US: SAS Web Infrastructure Platform CVE-2019-6462 (An issue was discovered in cairo 1.16.0. There is an infinite loop in ...) - cairo <unfixed> (low; bug #929945) - [buster] - cairo <no-dsa> (Minor issue) + [buster] - cairo <ignored> (Minor issue) [stretch] - cairo <no-dsa> (Minor issue) [jessie] - cairo <no-dsa> (Minor issue) NOTE: https://gitlab.freedesktop.org/cairo/cairo/issues/353 CVE-2019-6461 (An issue was discovered in cairo 1.16.0. There is an assertion problem ...) - cairo <unfixed> (low; bug #929944) - [buster] - cairo <no-dsa> (Minor issue) + [buster] - cairo <ignored> (Minor issue) [stretch] - cairo <no-dsa> (Minor issue) [jessie] - cairo <no-dsa> (Minor issue) NOTE: https://gitlab.freedesktop.org/cairo/cairo/issues/352 @@ -101155,7 +101155,7 @@ CVE-2018-18065 (_set_key in agent/helpers/table_container.c in Net-SNMP before 5 NOTE: https://sourceforge.net/p/net-snmp/code/ci/7ffb8e25a0db851953155de91f0170e9bf8c457d/ CVE-2018-18064 (cairo through 1.15.14 has an out-of-bounds stack-memory write during p ...) - cairo <unfixed> (low; bug #916083) - [buster] - cairo <no-dsa> (Minor issue) + [buster] - cairo <ignored> (Minor issue) [stretch] - cairo <no-dsa> (Minor issue) [jessie] - cairo <no-dsa> (Minor issue) NOTE: https://gitlab.freedesktop.org/cairo/cairo/issues/341 @@ -172117,7 +172117,7 @@ CVE-2017-9815 (In LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in libt NOTE: The issue is addressed with the same commit as for CVE-2017-9403 CVE-2017-9814 (cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote atta ...) - cairo <unfixed> (low; bug #868580) - [buster] - cairo <no-dsa> (Minor issue) + [buster] - cairo <ignored> (Minor issue) [stretch] - cairo <no-dsa> (Minor issue) [jessie] - cairo <no-dsa> (Minor issue) [wheezy] - cairo <no-dsa> (Minor issue) @@ -181447,7 +181447,7 @@ CVE-2017-7476 (Gnulib before 2017-04-26 has a heap-based buffer overflow with th NOTE: Introduced with 4bc76593 and 4e6e16b3f. CVE-2017-7475 (Cairo version 1.15.4 is vulnerable to a NULL pointer dereference relat ...) - cairo <unfixed> (low; bug #870264) - [buster] - cairo <no-dsa> (Minor issue) + [buster] - cairo <ignored> (Minor issue) [stretch] - cairo <no-dsa> (Minor issue) [jessie] - cairo <no-dsa> (Minor issue) [wheezy] - cairo <no-dsa> (Minor issue) diff --git a/data/DSA/list b/data/DSA/list index bf841c8a40..e4442e9340 100644 --- a/data/DSA/list +++ b/data/DSA/list @@ -1,3 +1,6 @@ +[08 Jul 2020] DSA-4722-1 ffmpeg - security update + {CVE-2019-13390 CVE-2019-17539 CVE-2019-17542 CVE-2020-12284 CVE-2020-13904} + [buster] - ffmpeg 7:4.1.6-1~deb10u1 [08 Jul 2020] DSA-4721-1 ruby2.5 - security update {CVE-2020-10663 CVE-2020-10933} [buster] - ruby2.5 2.5.5-3+deb10u2 diff --git a/data/dsa-needed.txt b/data/dsa-needed.txt index 030c572db7..06dc566176 100644 --- a/data/dsa-needed.txt +++ b/data/dsa-needed.txt @@ -14,8 +14,6 @@ If needed, specify the release by adding a slash after the name of the source pa -- curl (ghedo) -- -ffmpeg (jmm) --- fwupd -- libopenmpt |