[Git][security-tracker-team/security-tracker][master] 2 commits: LTS: move efail notes to the right place, warn about enigmail

[Antoine Beaupré]

Antoine Beaupré pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0bf06208 by Antoine Beaupré at 2018-09-27T02:56:00Z
LTS: move efail notes to the right place, warn about enigmail

- - - - -
42090856 by Antoine Beaupré at 2018-09-27T02:57:23Z
claim LTS xen work

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -40994,6 +40994,7 @@ CVE-2017-17688 (** DISPUTED ** The OpenPGP specification allows a Cipher Feedbac
 	[stretch] - enigmail <ignored> (Package broken in stable, can be fixed along when updated for ESR60)
 	NOTE: vulnerability is in the clients handling, not in OpenPGP
 	NOTE: https://efail.de
+	NOTE: possibly https://sourceforge.net/p/enigmail/source/ci/f6c111 and https://sourceforge.net/p/enigmail/source/ci/d2a83a
 CVE-2017-17687
 	RESERVED
 CVE-2017-17686


=====================================
data/dla-needed.txt
=====================================
@@ -21,8 +21,7 @@ dnsmasq (Santiago)
   NOTE: 2010920: main reason for a DLA is to update dns trust anchors (Santiago)
 --
 enigmail
-  NOTE: 20180603: Commits between https://sourceforge.net/p/enigmail/source/ci/f6c111 (abhijith)
-  NOTE: 20180603: and https://sourceforge.net/p/enigmail/source/ci/d2a83a might be useful. (abhijith)
+  NOTE: 20180926: see 871s9fps8e.fsf at curie.anarc.at before working on this (anarcat)
 --
 exiv2 (Roberto C. Sánchez)
 --
@@ -86,5 +85,5 @@ symfony (Thorsten Alteholz)
 --
 thunderbird
 --
-xen
+xen (Antoine Beaupre)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/ae0c1c9303be8bf75295166b488de7ba76a02ba5...42090856038044cf5d30d6980a53a34b24983e9c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/ae0c1c9303be8bf75295166b488de7ba76a02ba5...42090856038044cf5d30d6980a53a34b24983e9c
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180927/2947ea90/attachment.html>