[Secure-testing-commits] r46344 - in data: . DLA
Emilio Pozuelo Monfort
pochu at moszumanska.debian.org
Sat Nov 19 23:45:37 UTC 2016
Author: pochu
Date: 2016-11-19 23:45:36 +0000 (Sat, 19 Nov 2016)
New Revision: 46344
Modified:
data/DLA/list
data/dla-needed.txt
Log:
Reserve DLA-712-1 for gst-plugins-bad0.10
Modified: data/DLA/list
===================================================================
--- data/DLA/list 2016-11-19 11:34:39 UTC (rev 46343)
+++ data/DLA/list 2016-11-19 23:45:36 UTC (rev 46344)
@@ -1,3 +1,6 @@
+[20 Nov 2016] DLA-712-1 gst-plugins-bad0.10 - security update
+ {CVE-2016-9445 CVE-2016-9446}
+ [wheezy] - gst-plugins-bad0.10 0.10.23-7.1+deb7u3
[17 Nov 2016] DLA-711-1 curl - security update
{CVE-2016-8615 CVE-2016-8616 CVE-2016-8617 CVE-2016-8618 CVE-2016-8619 CVE-2016-8621 CVE-2016-8622 CVE-2016-8623 CVE-2016-8624}
[wheezy] - curl 7.26.0-1+wheezy17
Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt 2016-11-19 11:34:39 UTC (rev 46343)
+++ data/dla-needed.txt 2016-11-19 23:45:36 UTC (rev 46344)
@@ -21,8 +21,6 @@
--
firefox-esr
--
-gst-plugins-bad0.10 (Emilio Pozuelo)
---
icu (Roberto C. Sánchez)
NOTE: I have been unable to reproduce the CVE-2016-7415 crash as described in the PHP bug report
NOTE: 20161026: Still awaiting a response from the package maintainer and/or upstream (#838694)
More information about the Secure-testing-commits
mailing list