[Git][security-tracker-team/security-tracker][master] Clean cacti note entries in dla-needed.txt

Abhijith PA abhijith at debian.org
Fri Nov 6 05:08:43 GMT 2020



Abhijith PA pushed to branch master at Debian Security Tracker / security-tracker


Commits:
47fd0982 by Abhijith PA at 2020-11-06T10:37:51+05:30
Clean cacti note entries in dla-needed.txt

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -33611,7 +33611,7 @@ CVE-2020-13231 (In Cacti before 1.2.11, auth_profile.php?action=edit allows CSRF
 CVE-2020-13230 (In Cacti before 1.2.11, disabling a user account does not immediately  ...)
 	- cacti 1.2.11+ds1-1
 	[buster] - cacti 1.2.2+ds1-2+deb10u3
-	[stretch] - cacti <no-dsa> (Minor issue)
+	[stretch] - cacti <no-dsa> (Minor issue, Partial patch https://people.debian.org/~abhijith/upload/CVE-2020-13230.patch)
 	NOTE: https://github.com/Cacti/cacti/issues/3343
 CVE-2020-13229 (An issue was discovered in Sysax Multi Server 6.90. A session can be h ...)
 	NOT-FOR-US: Sysax Multi Server


=====================================
data/dla-needed.txt
=====================================
@@ -25,11 +25,7 @@ brotli (Roberto C. Sánchez)
   NOTE: 20201025: Requested patch review on debian-lts at l.d.o (roberto)
 --
 cacti
-  NOTE: 20200529: A patch need to be cooked up. Upstream patch not fit for jessie version (abhijith)
-  NOTE: 20200620: WIP (abhijith)
-  NOTE: 20200629: Working on the patch (abhijith)
-  NOTE: 20200701: Patch for CVE-2020-7237 should also be included for Stretch LTS. (utkarsh)
-  NOTE: 20200726: partial fix https://people.debian.org/~abhijith/upload/CVE-2020-13230.patch (abhijith)
+  NOTE: Remaining all CVEs are no-dsa.(abhijith)
 --
 ceph
   NOTE: 20200707: Vulnerable to at least CVE-2018-14662. (lamby)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/47fd098282286cea461a5950c8ea31abd0407168

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/47fd098282286cea461a5950c8ea31abd0407168
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201106/9913ca8d/attachment-0001.html>


More information about the debian-security-tracker-commits mailing list