Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
62d2a226 by Salvatore Bonaccorso at 2019-11-03T16:40:03Z
Move tracking of fixed version for CVE-2019-15682 to D[SL]A list
Previous setting is fine, but given there was an associated DSA move it
for that information directly to the resective DSA and DLA entry.
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/DSA/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -8705,8 +8705,6 @@ CVE-2019-15683 (TurboVNC server code contains stack
buffer overflow vulnerabilit
TODO: check
CVE-2019-15682 (RDesktop version 1.8.4 contains multiple out-of-bound access
read vuln ...)
- rdesktop 1.8.6-1
- [stretch] - rdesktop 1.8.6-2~deb9u1
- [jessie] - rdesktop 1.8.6-0+deb8u1
NOTE:
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/10/30/klcert-19-032-denial-of-service-in-rdesktop-before-1-8-4/
CVE-2019-15681 (LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a
contains ...)
{DLA-1979-1 DLA-1977-1}
=====================================
data/DLA/list
=====================================
@@ -453,6 +453,7 @@
[25 Jun 2019] DLA-1835-2 python3.4 - regression update
[jessie] - python3.4 3.4.2-1+deb8u4
[25 Jun 2019] DLA-1837-1 rdesktop - security update
+ {CVE-2019-15682}
[jessie] - rdesktop 1.8.6-0+deb8u1
[25 Jun 2019] DLA-1836-1 thunderbird - security update
{CVE-2019-11707 CVE-2019-11708}
=====================================
data/DSA/list
=====================================
@@ -303,6 +303,7 @@
{CVE-2019-11708}
[stretch] - firefox-esr 60.7.2esr-1~deb9u1
[28 Jun 2019] DSA-4473-1 rdesktop - security update
+ {CVE-2019-15682}
[stretch] - rdesktop 1.8.6-2~deb9u1
[28 Jun 2019] DSA-4472-1 expat - security update
{CVE-2018-20843}
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/62d2a22664a9797b67adf0d9c997224eb6ac0222
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/62d2a22664a9797b67adf0d9c997224eb6ac0222
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
