[Git][security-tracker-team/security-tracker][master] unclaimed after 3 weeks of inactivity: nss and tiff

[Holger Levsen]

Holger Levsen pushed to branch master at Debian Security Tracker / security-tracker


Commits:
222bcfbd by Holger Levsen at 2019-01-14T20:29:46Z
unclaimed after 3 weeks of inactivity: nss and tiff

Signed-off-by: Holger Levsen <holger at layer-acht.org>

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -75,7 +75,7 @@ mxml (Abhijith PA)
 --
 nettle (Ola Lundqvist)
 --
-nss (Roberto C. Sánchez)
+nss
   NOTE: 20181212: Bug report not public but it is likely that the package is vulnerable. Maintainer not contacted
   NOTE: 20181212: yet. Further investigation needed.
   NOTE: 20181217: Contacted Mozilla security with a request for access to the BZ issue. (roberto)
@@ -114,7 +114,7 @@ symfony (Roberto C. Sánchez)
 systemd
   NOTE: 20181119: tmpfiles.d issues remain, fix invasive, consider backporting all of tmpfiles.c (anarcat)
 --
-tiff (Hugo Lefeuvre)
+tiff
   NOTE: CVE-2018-19210: Working on a patch, see https://gitlab.com/libtiff/libtiff/merge_requests/47
   NOTE: CVE-2018-19210: 20181219: got review from upstream, waiting for final ack before uploading
   NOTE: CVE-2018-5360: 20181219: asked for cve update as duplicate of CVE-2014-8127



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/222bcfbdf573fa7a31f4b70cf69fc4c2b7f00989

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/222bcfbdf573fa7a31f4b70cf69fc4c2b7f00989
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190114/8c2972d7/attachment-0001.html>