[Git][security-tracker-team/security-tracker][master] 2 commits: LTS: move efail notes to the right place, warn about enigmail
Antoine Beaupré
anarcat at debian.org
Thu Sep 27 04:00:33 BST 2018
Antoine Beaupré pushed to branch master at Debian Security Tracker / security-tracker
Commits:
0bf06208 by Antoine Beaupré at 2018-09-27T02:56:00Z
LTS: move efail notes to the right place, warn about enigmail
- - - - -
42090856 by Antoine Beaupré at 2018-09-27T02:57:23Z
claim LTS xen work
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -40994,6 +40994,7 @@ CVE-2017-17688 (** DISPUTED ** The OpenPGP specification allows a Cipher Feedbac
[stretch] - enigmail <ignored> (Package broken in stable, can be fixed along when updated for ESR60)
NOTE: vulnerability is in the clients handling, not in OpenPGP
NOTE: https://efail.de
+ NOTE: possibly https://sourceforge.net/p/enigmail/source/ci/f6c111 and https://sourceforge.net/p/enigmail/source/ci/d2a83a
CVE-2017-17687
RESERVED
CVE-2017-17686
=====================================
data/dla-needed.txt
=====================================
@@ -21,8 +21,7 @@ dnsmasq (Santiago)
NOTE: 2010920: main reason for a DLA is to update dns trust anchors (Santiago)
--
enigmail
- NOTE: 20180603: Commits between https://sourceforge.net/p/enigmail/source/ci/f6c111 (abhijith)
- NOTE: 20180603: and https://sourceforge.net/p/enigmail/source/ci/d2a83a might be useful. (abhijith)
+ NOTE: 20180926: see 871s9fps8e.fsf at curie.anarc.at before working on this (anarcat)
--
exiv2 (Roberto C. Sánchez)
--
@@ -86,5 +85,5 @@ symfony (Thorsten Alteholz)
--
thunderbird
--
-xen
+xen (Antoine Beaupre)
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/ae0c1c9303be8bf75295166b488de7ba76a02ba5...42090856038044cf5d30d6980a53a34b24983e9c
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/ae0c1c9303be8bf75295166b488de7ba76a02ba5...42090856038044cf5d30d6980a53a34b24983e9c
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180927/2947ea90/attachment.html>
More information about the debian-security-tracker-commits
mailing list