[Git][security-tracker-team/security-tracker][master] Reserve DLA-2614-1 for busybox

[Markus Koschany]

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b71b0838 by Markus Koschany at 2021-04-01T20:10:33+02:00
Reserve DLA-2614-1 for busybox

- - - - -


2 changed files:

- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[01 Apr 2021] DLA-2614-1 busybox - security update
+	{CVE-2021-28831}
+	[stretch] - busybox 1:1.22.0-19+deb9u2
 [31 Mar 2021] DLA-2613-1 underscore - security update
 	{CVE-2021-23358}
 	[stretch] - underscore 1.8.3~dfsg-1+deb9u1


=====================================
data/dla-needed.txt
=====================================
@@ -17,10 +17,6 @@ ansible (Markus Koschany)
   NOTE: 20210322: As discussed with the maintainer I will update Buster first and
   NOTE: 20210322: after that LTS. Will ask for a maintainer review later this week.
 --
-busybox
-  NOTE: 20210319: Version in LTS is missing BAD_HUFT check in the patch, so perhaps
-  NOTE: 20210319: we are missing other vulnerabilities in this file. (lamby)
---
 ceph
   NOTE: 20200707: Vulnerable to at least CVE-2018-14662. (lamby)
   NOTE: 20200707: Some discussion regarding removal <https://lists.debian.org/debian-lts/2020/04/msg00019.html> (lamby)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b71b0838b790b7a9f82e0063872961b0c7af967c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b71b0838b790b7a9f82e0063872961b0c7af967c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210401/0ebaad4c/attachment.htm>