[Git][security-tracker-team/security-tracker][master] dla-needed: update pam-python, freeimage and p-reportlab
Hugo Lefeuvre
hle at debian.org
Mon Oct 28 09:42:30 GMT 2019
Hugo Lefeuvre pushed to branch master at Debian Security Tracker / security-tracker
Commits:
e7c2b6cc by Hugo Lefeuvre at 2019-10-28T09:41:43Z
dla-needed: update pam-python, freeimage and p-reportlab
- - - - -
1 changed file:
- data/dla-needed.txt
Changes:
=====================================
data/dla-needed.txt
=====================================
@@ -27,6 +27,7 @@ freeimage (Hugo Lefeuvre)
NOTE: Maintainer will take care of the update.
NOTE: https://lists.debian.org/debian-lts/2019/05/msg00079.html
NOTE: 20190707: maintainer is waiting for upstream https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929597
+ NOTE: 20191028: submitted a patch for CVE-2019-12211, see Debian bug report
--
gdal (Utkarsh Gupta)
--
@@ -95,12 +96,15 @@ pam-python (Hugo Lefeuvre)
NOTE: using a single commit for the entire release which changes many things. (lamby)
NOTE: 20191017: opened bug report and asked Russell (both Debian maintainer & upstream)
NOTE: for more information.
+ NOTE: 20191028: ongoing, maintainer will probably handle part or all of the update
+ NOTE: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942514
--
polarssl
--
python-ecdsa (Markus Koschany)
--
python-reportlab (Hugo Lefeuvre)
+ NOTE: 20191028: still no upstream fix
--
radare2
NOTE: 20190816: Affected by CVE-2019-14745. Vulnerable code is in
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e7c2b6cc10c6f8966cd45e8bf3496dcf65b89f09
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e7c2b6cc10c6f8966cd45e8bf3496dcf65b89f09
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191028/24867ed2/attachment-0001.html>
More information about the debian-security-tracker-commits
mailing list