[Git][security-tracker-team/security-tracker][master] 2 commits: data/dla-needed.txt: Add ksh; to tell if affected, it needs someone to look into it in more detail.

Mike Gabriel sunweaver at debian.org
Sat Jan 18 17:38:00 GMT 2020



Mike Gabriel pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6d8054b0 by Mike Gabriel at 2020-01-18T18:35:01+01:00
data/dla-needed.txt: Add ksh; to tell if affected, it needs someone to look into it in more detail.

- - - - -
6808a6fe by Mike Gabriel at 2020-01-18T18:37:52+01:00
data/dla-needed.txt: add python-pysaml2.

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -39,6 +39,10 @@ ibus
 jackson-databind
   NOTE: 20200105: Can be postponed again. (apo)
 --
+ksh
+  NOTE: 20200118: Upstream patch doesn't apply at all, but not clear if
+  NOTE: 20200118: or not. Thus, deeper triaging required. (sunweaver)
+--
 libexif (Hugo Lefeuvre)
   NOTE: 20191111: Contacted upstream for relevant commits of CVE-2019-9278. (utkarsh2102)
   NOTE: 20191114: Pinged upstream; just have the Android patch yet. (utkarsh2102)
@@ -90,6 +94,8 @@ openjpeg2 (Mike Gabriel)
 --
 otrs2 (Abhijith PA)
 --
+python-pysaml2
+--
 python-reportlab (Hugo Lefeuvre)
   NOTE: 20200111: still no upstream fix
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/589359be0c82f4eeb9a64dd1ab99d4b338d59d23...6808a6fe72098c8bd63691380b53d0414e00034a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/589359be0c82f4eeb9a64dd1ab99d4b338d59d23...6808a6fe72098c8bd63691380b53d0414e00034a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200118/8f0520aa/attachment.html>


More information about the debian-security-tracker-commits mailing list