[Git][security-tracker-team/security-tracker][master] Reserve DLA-2363-1 for asyncpg
Utkarsh Gupta
utkarsh at debian.org
Wed Sep 2 23:49:20 BST 2020
Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker
Commits:
847c393c by Utkarsh Gupta at 2020-09-03T04:18:32+05:30
Reserve DLA-2363-1 for asyncpg
- - - - -
2 changed files:
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[03 Sep 2020] DLA-2363-1 asyncpg - security update
+ {CVE-2020-17446}
+ [stretch] - asyncpg 0.8.4-1+deb9u1
[03 Sep 2020] DLA-2362-1 uwsgi - security update
{CVE-2020-11984}
[stretch] - uwsgi 2.0.14+20161117-3+deb9u3
=====================================
data/dla-needed.txt
=====================================
@@ -26,10 +26,6 @@ ark (Abhijith PA)
NOTE: 20200801: though testing with other PoC's available over internet seems exploitable (abhijith)
NOTE: 20200820: pinged upstream for help (abhijith)
--
-asyncpg (Utkarsh Gupta)
- NOTE: 20200815: Minor issue, but easy to fix. (sunweaver)
- NOTE: 20200831: has already been uploaded to the archive, just sending out the announcement is left. (utkarsh)
---
cacti
NOTE: 20200529: A patch need to be cooked up. Upstream patch not fit for jessie version (abhijith)
NOTE: 20200620: WIP (abhijith)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/847c393c6676c58faccfb20ba6ace5236200da1a
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/847c393c6676c58faccfb20ba6ace5236200da1a
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200902/f04d847b/attachment.html>
More information about the debian-security-tracker-commits
mailing list