[Git][security-tracker-team/security-tracker][master] LTS/update note and disclaim squid3

[Roberto C. Sánchez]

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5ddacb9e by Roberto C. Sánchez at 2020-01-16T11:22:33-05:00
LTS/update note and disclaim squid3

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -111,8 +111,13 @@ sqlite3 (Thorsten Alteholz)
   NOTE: 20191212: look at no-dsa as well
   NOTE: 20200112: WIP
 --
-squid3 (Roberto C. Sánchez)
+squid3
   NOTE: 20191210: Requires new API SBuf.
+  NOTE: 20200116: Researched other distros to see if any had backported the fixes.  No luck.
+  NOTE: 20200116: Tried for some time to reproduce the vulnerabilities, but did not succeed.
+  NOTE: 20200116: The change is rather involved when considering the new SBuf API, so not
+  NOTE: 20200116: being able to reproduce makes it impossible isolate the minimal change that
+  NOTE: 20200116: addresses the vulnerabilities. (roberto)
 --
 thunderbird (Emilio)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5ddacb9e649bcc7beab5aecb1d4058c56e019d9b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5ddacb9e649bcc7beab5aecb1d4058c56e019d9b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200116/6bba0426/attachment-0001.html>