[Git][security-tracker-team/security-tracker][master] dla-needed: update clamav and faad2 entries

[Hugo Lefeuvre]

Hugo Lefeuvre pushed to branch master at Debian Security Tracker / security-tracker


Commits:
60868a3c by Hugo Lefeuvre at 2019-08-10T13:22:51Z
dla-needed: update clamav and faad2 entries

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -11,15 +11,16 @@ https://wiki.debian.org/LTS/Development#Triage_new_security_issues
 
 --
 clamav (Hugo Lefeuvre)
- NOTE: 20190810: Previous updates appear to have been backports, not direct fixes. (lamby)
+  NOTE: wait for definitive patch to be available, then upgrade to latest upstream
+  NOTE: release (follow stretch changes) (hle)
+  NOTE: https://lists.debian.org/debian-lts/2019/08/msg00023.html
 --
 dnsmasq (Mike Gabriel)
 --
 faad2 (Hugo Lefeuvre)
-  NOTE: 20190519: I have a few patches pending for open issues. Will be PR-ed soon.
-  NOTE: 20190525: see https://github.com/knik0/faad2/pull/36
-  NOTE: 20190610: still waiting for review, currently discussing with Fabian
-  NOTE: 20190721: still no answer, will ping Fabian
+  NOTE: 20190810: I have done a second review of my patches and ping Fabian to get them
+  NOTE: merged at some point. see https://github.com/knik0/faad2/pull/36
+  NOTE: working on more patches (hle)
 --
 freeimage
   NOTE: Maintainer will take care of the update.
@@ -34,7 +35,7 @@ golang-go.crypto
 hdf5 (Hugo Lefeuvre)
   NOTE: 20190810: Upstream is aware of currently open issues. Progress is slow,
   NOTE: wait for the next HDF5 point release and either do full package upgrade
-  NOTE: or cherry pick fixes.
+  NOTE: or cherry pick fixes (hle)
 --
 imagemagick (Hugo Lefeuvre)
   NOTE: 20190809: almost done with triage. one issue really deserves a DLA, a few others



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/60868a3cb42938ce847868688b978e6e7ad33984

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/60868a3cb42938ce847868688b978e6e7ad33984
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190810/60ea2016/attachment-0001.html>