[Git][security-tracker-team/security-tracker][master] dla-needed: Add notes for stretch-pu packages
Adrian Bunk
bunk at debian.org
Thu Jul 9 11:32:01 BST 2020
Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker
Commits:
b23b6ec5 by Adrian Bunk at 2020-07-09T13:28:53+03:00
dla-needed: Add notes for stretch-pu packages
- - - - -
1 changed file:
- data/dla-needed.txt
Changes:
=====================================
data/dla-needed.txt
=====================================
@@ -68,6 +68,7 @@ freerdp
glib-networking (Emilio)
--
gosa (Chris Lamb)
+ NOTE: 20200709: #958850 is a stretch-pu update for CVE-2019-14466 (bunk)
--
gupnp
--
@@ -129,6 +130,7 @@ rails (Sylvain Beucler)
NOTE: 20200706: https://lists.debian.org/debian-lts/2020/06/msg00095.html
NOTE: 20200706: got regression claim but probably erroneous
NOTE: 20200706: https://lists.debian.org/debian-lts/2020/07/msg00033.html
+ NOTE: 20200709: #954664 is a stretch-pu update for CVE-2020-5267 (bunk)
--
ruby-rack (Utkarsh Gupta)
NOTE: probably not affected (parse_cookies_header() is not available in Jessie, but code might hide somewhere else) (thorsten)
@@ -162,6 +164,7 @@ unbound
NOTE: 20200616: https://lists.debian.org/debian-lts/2020/06/msg00038.html (bam)
--
wpa (Abhijith PA)
+ NOTE: 20200709: #949367 is a stretch-pu update for CVE-2019-16275 (bunk)
--
xcftools
NOTE: 20200111: wrote a patch + reproducer for CVE-2019-5086, waiting for upstream review (hle)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b23b6ec56f72b20b4f720ac0ba8b8a2966ac8336
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b23b6ec56f72b20b4f720ac0ba8b8a2966ac8336
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200709/8ca1f8c3/attachment-0001.html>
More information about the debian-security-tracker-commits
mailing list