summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMarkus Koschany <apo@debian.org>2021-02-15 12:03:35 +0100
committerMarkus Koschany <apo@debian.org>2021-02-15 12:04:28 +0100
commit7eb8e14f65e17b32bad77da0db6c70be706c0473 (patch)
tree08b4f7a0c5a6f8a9014a4b5d298ef95d4e3daecc
parent6aa0e14d0ae11ebf7f118954193630e82d485e87 (diff)
Remove no-dsa tags for upcoming busybox update in Stretch.
-rw-r--r--data/CVE/2011.list1
-rw-r--r--data/CVE/2015.list1
-rw-r--r--data/CVE/2016.list2
-rw-r--r--data/CVE/2017.list2
-rw-r--r--data/CVE/2018.list1
5 files changed, 0 insertions, 7 deletions
diff --git a/data/CVE/2011.list b/data/CVE/2011.list
index 1e53781cc6..ee97c0f9f6 100644
--- a/data/CVE/2011.list
+++ b/data/CVE/2011.list
@@ -17,7 +17,6 @@ CVE-2011-5326 (imlib2 before 1.4.9 allows remote attackers to cause a denial of
CVE-2011-5325 (Directory traversal vulnerability in the BusyBox implementation of tar ...)
{DLA-1445-1}
- busybox 1:1.27.2-1 (bug #802702)
- [stretch] - busybox <no-dsa> (Minor issue)
[wheezy] - busybox <no-dsa> (Minor issue)
[squeeze] - busybox <no-dsa> (Minor issue)
CVE-2011-5324 (The TeraRecon server, as used in GE Healthcare Centricity PACS-IW 3.7. ...)
diff --git a/data/CVE/2015.list b/data/CVE/2015.list
index 34dbd50619..0402a0c9c7 100644
--- a/data/CVE/2015.list
+++ b/data/CVE/2015.list
@@ -5007,7 +5007,6 @@ CVE-2015-7944 (The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti
CVE-2015-9261 (huft_build in archival/libarchive/decompress_gunzip.c in BusyBox befor ...)
{DLA-1445-1 DLA-337-1}
- busybox 1:1.27.2-1 (bug #803097)
- [stretch] - busybox <no-dsa> (Minor issue)
NOTE: https://www.openwall.com/lists/oss-security/2015/10/25/3
NOTE: http://git.busybox.net/busybox/commit/?id=1de25a6e87e0e627aa34298105a3d17c60a1f44e
NOTE: https://git.busybox.net/busybox/commit/archival/libarchive/decompress_gunzip.c?id=6bd3fff51aa74e2ee2d87887b12182a3b09792ef
diff --git a/data/CVE/2016.list b/data/CVE/2016.list
index 8aba38569f..b01c449cd3 100644
--- a/data/CVE/2016.list
+++ b/data/CVE/2016.list
@@ -26760,13 +26760,11 @@ CVE-2016-2149 (Red Hat OpenShift Enterprise 3.2 allows remote authenticated user
CVE-2016-2148 (Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox befo ...)
{DLA-1445-1}
- busybox 1:1.27.2-1 (bug #818497)
- [stretch] - busybox <no-dsa> (Minor issue)
[wheezy] - busybox <no-dsa> (Minor issue)
NOTE: https://git.busybox.net/busybox/commit/?id=352f79acbd759c14399e39baef21fc4ffe180ac2
CVE-2016-2147 (Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 ...)
{DLA-1445-1}
- busybox 1:1.27.2-1 (bug #818499)
- [stretch] - busybox <no-dsa> (Minor issue)
[wheezy] - busybox <no-dsa> (Minor issue)
NOTE: https://git.busybox.net/busybox/commit/?id=d474ffc68290e0a83651c4432eeabfa62cd51e87
CVE-2016-2146 (The am_read_post_data function in mod_auth_mellon before 0.11.1 does n ...)
diff --git a/data/CVE/2017.list b/data/CVE/2017.list
index 5079ee5164..ece82e5c55 100644
--- a/data/CVE/2017.list
+++ b/data/CVE/2017.list
@@ -7004,7 +7004,6 @@ CVE-2017-16545 (The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.
CVE-2017-16544 (In the add_match function in libbb/lineedit.c in BusyBox through 1.27. ...)
{DLA-1445-1}
- busybox 1:1.27.2-2 (bug #882258)
- [stretch] - busybox <no-dsa> (Minor issue, can be fixed via point release)
[wheezy] - busybox <no-dsa> (Minor issue)
NOTE: https://www.twistlock.com/2017/11/20/cve-2017-16544-busybox-autocompletion-vulnerability/
NOTE: https://git.busybox.net/busybox/commit/?id=c3797d40a1c57352192c6106cc0f435e7d9c11e8
@@ -8678,7 +8677,6 @@ CVE-2017-15874 (archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an
CVE-2017-15873 (The get_next_block function in archival/libarchive/decompress_bunzip2. ...)
{DLA-1445-1}
- busybox 1:1.27.2-2 (bug #879732)
- [stretch] - busybox <no-dsa> (Minor issue)
[wheezy] - busybox <no-dsa> (Minor issue)
NOTE: Fixed by: https://git.busybox.net/busybox/commit/?id=0402cb32df015d9372578e3db27db47b33d5c7b0
NOTE: https://bugs.busybox.net/show_bug.cgi?id=10431
diff --git a/data/CVE/2018.list b/data/CVE/2018.list
index b20248688f..c95f834ab4 100644
--- a/data/CVE/2018.list
+++ b/data/CVE/2018.list
@@ -22709,7 +22709,6 @@ CVE-2018-1000518 (aaugustin websockets version 4 contains a CWE-409: Improper Ha
CVE-2018-1000517 (BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c ...)
{DLA-1445-1}
- busybox 1:1.27.2-3 (low; bug #902724)
- [stretch] - busybox <no-dsa> (Minor issue; can be fixed via point release)
NOTE: https://git.busybox.net/busybox/commit/?id=8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e
CVE-2018-1000516 (The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper N ...)
NOT-FOR-US: Galaxy Project Galaxy

© 2014-2024 Faster IT GmbH | imprint | privacy policy