Skip to content
Commits on Source (5)
......@@ -450,6 +450,7 @@ CVE-2019-14275 (Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the cal
NOTE: Crash in CLI tool, no security impact, hardening build
CVE-2019-14274 (MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function i ...)
- mcpp <unfixed>
[jessie] - mcpp <no-dsa> (Minor issue)
NOTE: https://sourceforge.net/p/mcpp/bugs/13/
CVE-2019-14273
RESERVED
......@@ -41,6 +41,8 @@ hdf5 (Hugo Lefeuvre)
imagemagick (Hugo Lefeuvre)
NOTE: triage work first, large number of open issues
--
jackson-databind
--
libav
NOTE: 20190529: There are currently 19 CVE issues known for libav in jessie,
NOTE: 20190529: 11 tagged as <no-dsa>. These issues have been triaged, no patch
......@@ -86,6 +88,8 @@ proftpd-dfsg (Markus Koschany)
--
python2.7 (Thorsten Alteholz)
--
qbittorrent
--
qemu
NOTE: 20190528: An upload candidate is waiting for being tested on real hardware.
NOTE: 20190528: Still need to set up a notebook with jessie installed for testing.
......@@ -103,6 +107,8 @@ ruby-openid
NOTE: 20190710: I'm at a loss to how to continue persuing this issue (see https://github.com/openid/ruby-openid/issues/122) so returning to the pool. (lamby)
NOTE: 20190726: Still unknown how to fix (see aforementioned github issue) (lamby)
--
scapy
--
slurm-llnl
--
sox
......@@ -144,3 +150,5 @@ wpa
xen
NOTE: 20190629: Contacted credativ support and asked for a status update
--
xymon (Thorsten alteholz)
--