summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDominik George <natureshadow@debian.org>2022-05-13 18:49:03 +0200
committerDominik George <natureshadow@debian.org>2022-05-13 18:49:03 +0200
commit19eb3c00d055bd445e017f6f55e98ba98050c108 (patch)
tree23f49f648090aa98af6de49791c8658131e27ce6
parent607d39fddb03da3ac66a80915b093587950c5e35 (diff)
Reserve DLA-3001-1 for libgoogle-gson-java
-rw-r--r--data/DLA/list3
-rw-r--r--data/dla-needed.txt2
2 files changed, 3 insertions, 2 deletions
diff --git a/data/DLA/list b/data/DLA/list
index 6cff024e6a..c1f609ef09 100644
--- a/data/DLA/list
+++ b/data/DLA/list
@@ -1,3 +1,6 @@
+[13 May 2022] DLA-3001-1 libgoogle-gson-java - security update
+ {CVE-2022-25647}
+ [stretch] - libgoogle-gson-java 2.4-1+deb9u1
[12 May 2022] DLA-3000-1 waitress - security update
{CVE-2019-16785 CVE-2019-16786 CVE-2019-16789 CVE-2019-16792 CVE-2022-24761}
[stretch] - waitress 1.0.1-1+deb9u1
diff --git a/data/dla-needed.txt b/data/dla-needed.txt
index 92199a3570..da87ee99de 100644
--- a/data/dla-needed.txt
+++ b/data/dla-needed.txt
@@ -103,8 +103,6 @@ kvmtool
NOTE: 20220402: stretch-specific, orphaned package (Beuc)
NOTE: 20220402: CVE-2021-45464 looks critical, check with upstream for acknowledgments/fixes (Beuc)
--
-libgoogle-gson-java (Dominik George)
---
liblouis
NOTE: 20220320: no patch available yet. Reproducible memory leaks with ASAN
NOTE: 20220320: and POC. Consider fixing CVE-2018-17294 too.

© 2014-2024 Faster IT GmbH | imprint | privacy policy