[Git][security-tracker-team/security-tracker][master] 3 commits: dla: unclaim brotli
Emilio Pozuelo Monfort
pochu at debian.org
Fri Sep 25 23:37:59 BST 2020
Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker
Commits:
108d79b5 by Emilio Pozuelo Monfort at 2020-09-26T00:33:25+02:00
dla: unclaim brotli
- - - - -
171ccc95 by Emilio Pozuelo Monfort at 2020-09-26T00:36:43+02:00
dla: update firefox-esr status
- - - - -
22181da4 by Emilio Pozuelo Monfort at 2020-09-26T00:37:15+02:00
dla: take thunderbird
Will coordinate with maintainer and sec-team.
- - - - -
1 changed file:
- data/dla-needed.txt
Changes:
=====================================
data/dla-needed.txt
=====================================
@@ -30,7 +30,7 @@ ark
NOTE: 20200907: patch https://people.debian.org/~abhijith/upload/backport_to_1608.patch crashes (abhijith)
NOTE: 20200921: CLI works but GUI not, It seems the fix is not compatible with the old architecture (abhijith)
--
-brotli (Emilio)
+brotli
--
cacti
NOTE: 20200529: A patch need to be cooked up. Upstream patch not fit for jessie version (abhijith)
@@ -69,7 +69,7 @@ f2fs-tools
--
firefox-esr (Emilio)
NOTE: 20200720: working on ESR 78 backport. (pochu)
- NOTE: 20200913: backported rustc, cargo and rust-cbindgen, uploads will follow after the buster ones (pochu)
+ NOTE: 20200926: backported llvm 7 fix, rustc, cargo, rust-cbindgen, gcc 7, nodejs 10 (pochu)
--
fossil
NOTE: 20200903: looked into CVE-2020-24614: the fix for this CVE partially applies, but does not apply around a
@@ -208,6 +208,8 @@ sympa
--
tinymce (Abhijith PA)
--
+thunderbird (Emilio)
+--
xcftools
NOTE: 20200111: wrote a patch + reproducer for CVE-2019-5086, waiting for upstream review (hle)
NOTE: 20200414: Flurry of activity on/around 20200401 essentially rejecting original patch
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/348978bf60661d35ed0600b7d93706995fc980be...22181da4beab26233e381ba31ee2a0390ca8ccc6
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/348978bf60661d35ed0600b7d93706995fc980be...22181da4beab26233e381ba31ee2a0390ca8ccc6
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200925/bf54c46c/attachment.html>
More information about the debian-security-tracker-commits
mailing list