[Git][security-tracker-team/security-tracker][master] dla-needed.txt: Add note on CVE-2020-1769 in otrs2.

[Chris Lamb]

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
412817e4 by Chris Lamb at 2020-04-27T09:56:06+01:00
dla-needed.txt: Add note on CVE-2020-1769 in otrs2.

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -73,6 +73,10 @@ openjdk-7 (Roberto C. Sánchez)
 --
 otrs2
   NOTE: 20200412: Asked upstream for clarity in CVE-2020-1769 patch (abhijith)
+  NOTE: 20200427: Cannot find the above comment on the various commits/PRs, nor
+  NOTE: 20200427: on the -dev mailing list. I suspect its entirely safe to
+  NOTE: 20200427: disable autocomplete without the cumbersome (and likely
+  NOTE: 20200427: difficult-to-patch) configuration switch.  (lamby)
 --
 ruby-rack
   NOTE: 20191219: The security update causes a regression and also, there's a



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/412817e40dedc2a4f03db4e867d8e66272975a2b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/412817e40dedc2a4f03db4e867d8e66272975a2b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200427/d0bac81e/attachment.html>