[Secure-testing-commits] r41896 - in data: . CVE

[Markus Koschany]

Author: apo
Date: 2016-05-19 19:37:39 +0000 (Thu, 19 May 2016)
New Revision: 41896

Modified:
   data/CVE/list
   data/dla-needed.txt
Log:
Mark sogo as unsupported in Wheezy LTS.


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-05-19 19:33:39 UTC (rev 41895)
+++ data/CVE/list	2016-05-19 19:37:39 UTC (rev 41896)
@@ -23683,6 +23683,8 @@
 CVE-2015-5395 [CSRF]
 	RESERVED
 	- sogo <unfixed> (bug #796197)
+	[wheezy] - sogo <end-of-life> (not supported in Wheezy LTS)
+	NOTE: https://lists.debian.org/debian-lts/2016/05/msg00197.html
 	NOTE: http://www.openwall.com/lists/oss-security/2015/07/07/10
 	NOTE: http://www.sogo.nu/bugs/view.php?id=3246
 	NOTE: https://github.com/inverse-inc/sogo/commit/582baf2960969c73f98643e46cfb49432c30b711 (SOGo-3.1.0)

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2016-05-19 19:33:39 UTC (rev 41895)
+++ data/dla-needed.txt	2016-05-19 19:37:39 UTC (rev 41896)
@@ -104,9 +104,6 @@
 samba
   NOTE: regression update required for #821811, patches available
 --
-sogo
-  NOTE: Solved in 3.1.0 according to upstream. Sid has 2.2.17 so far.
---
 squid
 --
 tardiff