[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: add apache-log4j1.2 (with suggestion to eol it).

[Mike Gabriel]

Mike Gabriel pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bc912e88 by Mike Gabriel at 2019-12-21T18:27:18Z
data/dla-needed.txt: add apache-log4j1.2 (with suggestion to eol it).

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -15,6 +15,10 @@ ansible
   NOTE: CVE-2019-14846 should be an easy fix.
   NOTE: CVE-2019-14858's upstream patch is too big; fails to work properly. (utkarsh2102)
 --
+apache-log4j1.2
+  NOTE: 20191221: Someone with more Java knowledge, please consider eol'ing this package
+  NOTE: 20191221: as recommended for oldstable by the secteam. (sunweaver)
+--
 clamav (Hugo Lefeuvre)
   NOTE: 20191216: waiting for 0.102.1 to enter stretch/buster.
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/bc912e88b01e0f63af30de76c2242bcbd8d7062f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/bc912e88b01e0f63af30de76c2242bcbd8d7062f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191221/ccbe1095/attachment-0001.html>