summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2020-01-30 21:20:13 +0100
committerSalvatore Bonaccorso <carnil@debian.org>2020-01-30 21:20:13 +0100
commit6f71362da8b403e5a91c0f4f3c1cd25f24c9f2c5 (patch)
tree9ce1dfe4df9b55b08417f87d0a11663c8e42d573
parent93b8f0d075b6de8b0117553d40b6327e8ec20d12 (diff)
Mark CVE-2019-12290/libidn2 as no-dsa
Furthermore the change is quite intrusive and too risky to solely ship via a security update. Rather the CVE fix should be postponed and proposed via a point release.
-rw-r--r--data/CVE/2019.list1
1 files changed, 1 insertions, 0 deletions
diff --git a/data/CVE/2019.list b/data/CVE/2019.list
index 6447d44974..857a821e73 100644
--- a/data/CVE/2019.list
+++ b/data/CVE/2019.list
@@ -20644,6 +20644,7 @@ CVE-2019-12291 (HashiCorp Consul 1.4.0 through 1.5.0 has Incorrect Access Contro
NOT-FOR-US: HashiCorp Consul
CVE-2019-12290 (GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specifi ...)
- libidn2 2.2.0-1
+ [buster] - libidn2 <no-dsa> (Minor issue; intrusive to backport)
NOTE: https://gitlab.com/libidn/libidn2/commit/241e8f486134793cb0f4a5b0e5817a97883401f5 (2.2.0)
NOTE: https://gitlab.com/libidn/libidn2/merge_requests/71
CVE-2019-12289 (An issue was discovered in upgrade_firmware.cgi on VStarcam 100T (C782 ...)

© 2014-2024 Faster IT GmbH | imprint | privacy policy