diff options
| author | Salvatore Bonaccorso <carnil@debian.org> | 2020-01-30 21:20:13 +0100 |
|---|---|---|
| committer | Salvatore Bonaccorso <carnil@debian.org> | 2020-01-30 21:20:13 +0100 |
| commit | cd7f91160cfaed07a43edb4189493ad8eb553940 (patch) | |
| tree | 74f9a608e68ff66b59dccc6b95d4c84b19163aac | |
| parent | 4686c022734ebf6b6d208371f6ae1f9dcc891bea (diff) | |
Mark CVE-2019-12290/libidn2 as no-dsa
Furthermore the change is quite intrusive and too risky to solely ship
via a security update. Rather the CVE fix should be postponed and
proposed via a point release.
| -rw-r--r-- | data/CVE/list.2019 | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/data/CVE/list.2019 b/data/CVE/list.2019 index 6447d44974..857a821e73 100644 --- a/data/CVE/list.2019 +++ b/data/CVE/list.2019 @@ -20644,6 +20644,7 @@ CVE-2019-12291 (HashiCorp Consul 1.4.0 through 1.5.0 has Incorrect Access Contro NOT-FOR-US: HashiCorp Consul CVE-2019-12290 (GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specifi ...) - libidn2 2.2.0-1 + [buster] - libidn2 <no-dsa> (Minor issue; intrusive to backport) NOTE: https://gitlab.com/libidn/libidn2/commit/241e8f486134793cb0f4a5b0e5817a97883401f5 (2.2.0) NOTE: https://gitlab.com/libidn/libidn2/merge_requests/71 CVE-2019-12289 (An issue was discovered in upgrade_firmware.cgi on VStarcam 100T (C782 ...) |