[Secure-testing-commits] r53033 - in data: . DLA

[Raphaël Hertzog]

Author: hertzog
Date: 2017-06-30 09:44:08 +0000 (Fri, 30 Jun 2017)
New Revision: 53033

Modified:
   data/DLA/list
   data/dla-needed.txt
Log:
Reserve DLA-1006-1 for libarchive

Modified: data/DLA/list
===================================================================
--- data/DLA/list	2017-06-30 09:16:42 UTC (rev 53032)
+++ data/DLA/list	2017-06-30 09:44:08 UTC (rev 53033)
@@ -1,3 +1,6 @@
+[30 Jun 2017] DLA-1006-1 libarchive - security update
+	{CVE-2016-10209 CVE-2016-10349 CVE-2016-10350}
+	[wheezy] - libarchive 3.0.4-3+wheezy6
 [29 Jun 2017] DLA-1005-1 mercurial - security update
 	{CVE-2017-9462}
 	[wheezy] - mercurial 2.2.2-4+deb7u4

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2017-06-30 09:16:42 UTC (rev 53032)
+++ data/dla-needed.txt	2017-06-30 09:44:08 UTC (rev 53033)
@@ -52,11 +52,6 @@
 --
 kdepim (Lucas Kanashiro)
 --
-libarchive (Raphaël Hertzog)
-  NOTE: I suggest to wait for more issues. Could not find more information
-  NOTE: about the undetermined CVEs. Debdiff is at:
-  NOTE: https://people.debian.org/~apo/libarchive/libarchive.debdiff
---
 libav
   NOTE: Diego Biurrun (from the libav team) is working on patches.
   NOTE: undetermined issues are currently being triaged (Diego Biurrun and Hugo Lefeuvre