[Secure-testing-commits] r51162 - in data: . DLA

[Hugo Lefeuvre]

Author: hle
Date: 2017-04-28 20:04:24 +0000 (Fri, 28 Apr 2017)
New Revision: 51162

Modified:
   data/DLA/list
   data/dla-needed.txt
Log:
Reserve DLA-923-1 for partclone

Modified: data/DLA/list
===================================================================
--- data/DLA/list	2017-04-28 18:59:29 UTC (rev 51161)
+++ data/DLA/list	2017-04-28 20:04:24 UTC (rev 51162)
@@ -1,3 +1,6 @@
+[28 Apr 2017] DLA-923-1 partclone - security update
+	{CVE-2017-6596}
+	[wheezy] - partclone 0.2.48-1+deb7u1
 [28 Apr 2017] DLA-922-1 linux - security update
 	{CVE-2016-2188 CVE-2016-9604 CVE-2016-10200 CVE-2017-2647 CVE-2017-2671 CVE-2017-5967 CVE-2017-5970 CVE-2017-6951 CVE-2017-7184 CVE-2017-7261 CVE-2017-7273 CVE-2017-7294 CVE-2017-7308 CVE-2017-7472 CVE-2017-7616 CVE-2017-7618}
 	[wheezy] - linux 3.2.88-1

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2017-04-28 18:59:29 UTC (rev 51161)
+++ data/dla-needed.txt	2017-04-28 20:04:24 UTC (rev 51162)
@@ -90,9 +90,6 @@
 --
 openjdk-7 (Emilio Pozuelo)
 --
-partclone (Hugo Lefeuvre)
-  NOTE: CVE-2017-6596 successfully reproduced on Debian Wheezy, but upstream patch doesn't fix the issue.
---
 potrace
   NOTE: Upstream is not going to fix CVE-2016-8686 since it believes it is not
   NOTE: a bug (see #843861).