[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Reserve DLA-1331-1 for mercurial

[Antoine Beaupré]

Antoine Beaupré pushed to branch master at Debian Security Tracker / security-tracker


Commits:
022422f9 by Antoine Beaupré at 2018-03-30T11:16:41-04:00
Reserve DLA-1331-1 for mercurial

- - - - -


2 changed files:

- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/DLA/list
=====================================
--- a/data/DLA/list
+++ b/data/DLA/list
@@ -1,3 +1,6 @@
+[30 Mar 2018] DLA-1331-1 mercurial - security update
+	{CVE-2017-1000116 CVE-2018-1000132}
+	[wheezy] - mercurial 2.2.2-4+deb7u7
 [30 Mar 2018] DLA-1330-1 openssl - security update
 	{CVE-2018-0739}
 	[wheezy] - openssl 1.0.1t-1+deb7u4


=====================================
data/dla-needed.txt
=====================================
--- a/data/dla-needed.txt
+++ b/data/dla-needed.txt
@@ -95,14 +95,6 @@ libvorbis
 --
 linux
 --
-mercurial (anarcat)
-  NOTE: 20180315: The patch to CVE-2016-1000116 added in 2.2.2-4+deb7u5 makes
-  NOTE: 20180315: the testsuite fail nondeterminstically. You will need to apply
-  NOTE: 20180315: https://gist.github.com/lamby/117316c5ab3951af0857d4f8c5f4b2e6/raw
-  NOTE: 20180315: You will also need to remove `tests/gpg/random_seed` in clean target.
-  NOTE: 20180315:
-  NOTE: 20180315:    -- Chris Lamb <lamby at debian.org>  Thu, 15 Mar 2018 17:54:32 -0700
---
 ming (Hugo Lefeuvre)
   NOTE: 20180317: wip, currently working on it with upstream. Since I have to write all patches by myself, it might take a while.
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/022422f9f85ab05a776494bfab6662281ae085c0

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/022422f9f85ab05a776494bfab6662281ae085c0
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180330/19bf47bf/attachment.html>