[Git][security-tracker-team/security-tracker][master] lts: update notes

[Emilio Pozuelo Monfort]

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0ca06ac1 by Emilio Pozuelo Monfort at 2020-12-07T09:24:45+01:00
lts: update notes

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -47,7 +47,8 @@ f2fs-tools
   NOTE: 20200815: About CVE-2020-6070. The fix got introduced between 1.12.0 and 1.13.0, but it is not trivial to
   NOTE: 20200815: to detect which of the patches correlates to the CVE. Contacting upstream might be necessary. (sunweaver)
 --
-firmware-nonfree (Emilio)
+firmware-nonfree
+  NOTE: 20201207: wait for the update in buster and backport that (Emilio)
 --
 golang-golang-x-net-dev (Brian May)
 --
@@ -184,7 +185,7 @@ xcftools
   NOTE: 20200605: Patch https://salsa.debian.org/lts-team/packages/xcftools/-/blob/fix/test-CVE-2019-5087/debian/patches/CVE-2019-5087.patch (gladk)
 --
 xdg-utils (Emilio)
-  NOTE: 20201122: wait for a while to get the fix exposed in other suites. (utkarsh)
+  NOTE: 20201207: pinged upstream about the proposed patch (Emilio)
 --
 xorg-server (Emilio)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0ca06ac161363d4c97de6b62429403d5475d1052

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0ca06ac161363d4c97de6b62429403d5475d1052
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201207/28d1212b/attachment-0001.html>