[Git][security-tracker-team/security-tracker][master] Reserve DLA-1658-1 for phpmyadmin

Lucas Kanashiro kanashiro at debian.org
Fri Feb 1 22:48:26 GMT 2019


Lucas Kanashiro pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6a9edd27 by Lucas Kanashiro at 2019-02-01T22:48:13Z
Reserve DLA-1658-1 for phpmyadmin

- - - - -


2 changed files:

- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[01 Feb 2019] DLA-1658-1 phpmyadmin - security update
+	{CVE-2018-19968 CVE-2018-19970}
+	[jessie] - phpmyadmin 4:4.2.12-2+deb8u4
 [01 Feb 2019] DLA-1657-1 debian-security-update - security update
 	[jessie] - debian-security-support 2019.02.01~deb8u1
 [01 Feb 2019] DLA-1656-1 agg - security update


=====================================
data/dla-needed.txt
=====================================
@@ -101,11 +101,6 @@ openssh (Mike Gabriel)
 --
 php5 (Roberto C. Sánchez)
 --
-phpmyadmin (Lucas Kanashiro)
-  NOTE: 20190116: Please also fix no-dsa issue CVE-2018-19970 (requested by sunweaver, with frontdesk hat on)
-  NOTE: 20190116: Please also triage CVE-2018-19969. Thanks.
-  NOTE: 20190117: Fixing CVE-2018-19970 requested by sunweaver and investigating CVE-2018-19969. (kanashiro)
---
 polarssl
   NOTE: 20121207: Not 100% sure if vulnerable. Upstream would prefer us to move to latest version, etc. (!). (lamby)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6a9edd275e8a7c356b550dd2de2af5cf646f81a6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6a9edd275e8a7c356b550dd2de2af5cf646f81a6
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190201/4aea491e/attachment.html>


More information about the debian-security-tracker-commits mailing list