[Secure-testing-commits] r49732 - in data: . DLA

[Brian May]

Author: bam
Date: 2017-03-17 08:38:18 +0000 (Fri, 17 Mar 2017)
New Revision: 49732

Modified:
   data/DLA/list
   data/dla-needed.txt
Log:
Reserve DLA for calibre

Modified: data/DLA/list
===================================================================
--- data/DLA/list	2017-03-17 08:35:24 UTC (rev 49731)
+++ data/DLA/list	2017-03-17 08:38:18 UTC (rev 49732)
@@ -1,3 +1,6 @@
+[17 Mar 2017] DLA-859-1 calibre - security update
+	{CVE-2016-10187}
+	[wheezy] - calibre 0.8.51+dfsg1-0.1+deb7u1
 [17 Mar 2017] DLA-858-1 wireshark - security update
 	{CVE-2017-5596 CVE-2017-5597 CVE-2017-6467 CVE-2017-6468 CVE-2017-6469 CVE-2017-6470 CVE-2017-6471 CVE-2017-6472 CVE-2017-6473 CVE-2017-6474}
 	[wheezy] - wireshark 1.12.1+g01b65bf-4+deb8u6~deb7u7

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2017-03-17 08:35:24 UTC (rev 49731)
+++ data/dla-needed.txt	2017-03-17 08:38:18 UTC (rev 49732)
@@ -19,11 +19,6 @@
   NOTE: I suggest to wait for more important issues. CVE-2016-7837 has a rather
   NOTE: low impact.
 --
-calibre (Brian May)
-  NOTE: We will need to investigate the issue much further.
-  NOTE: In particular, it seems likely that there are more undocumented but
-  NOTE: public security issues in Calibre. See for example bug #853004.
---
 cgiemail (Jonas Meurer)
   NOTE: 2017-03-10: Sent a mail to the cPanel security team and asked them to
   NOTE: share their security fixes for cgiemail. -- Jonas Meurer