[Git][security-tracker-team/security-tracker][master] Reserve DLA-2615-1 for spamassassin
Utkarsh Gupta
utkarsh at debian.org
Thu Apr 1 22:20:46 BST 2021
Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker
Commits:
a8674276 by Utkarsh Gupta at 2021-04-02T02:50:32+05:30
Reserve DLA-2615-1 for spamassassin
- - - - -
2 changed files:
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[02 Apr 2021] DLA-2615-1 spamassassin - security update
+ {CVE-2020-1946}
+ [stretch] - spamassassin 3.4.2-1~deb9u4
[01 Apr 2021] DLA-2614-1 busybox - security update
{CVE-2021-28831}
[stretch] - busybox 1:1.22.0-19+deb9u2
=====================================
data/dla-needed.txt
=====================================
@@ -139,8 +139,6 @@ shiro (Roberto C. Sánchez)
smarty3 (Abhijith PA)
NOTE: 20200322: CVE-2018-13982 need more time to backport (abhijith)
--
-spamassassin (Utkarsh)
---
spotweb
NOTE: 20201220: The affected code uses string concatenation to construct a SQL query.
NOTE: 20201220: Upstream's "fix" is to blacklist all the "bad" SQL commands. (roberto)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a8674276ab89937b731cb53a8af939fedb965487
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a8674276ab89937b731cb53a8af939fedb965487
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210401/aa2c2b68/attachment.htm>
More information about the debian-security-tracker-commits
mailing list