[Git][security-tracker-team/security-tracker][master] Reserve DLA-2861-1 for rdflib

Adrian Bunk (@bunk) bunk at debian.org
Tue Dec 28 13:09:04 GMT 2021



Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker


Commits:
68a50ea0 by Adrian Bunk at 2021-12-28T15:08:51+02:00
Reserve DLA-2861-1 for rdflib

- - - - -


3 changed files:

- data/CVE/list
- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -186352,7 +186352,6 @@ CVE-2019-7650
 CVE-2019-7653 (The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CL ...)
 	{DLA-1717-1}
 	- rdflib 4.2.2-2 (low; bug #921751)
-	[stretch] - rdflib <no-dsa> (Minor issue)
 	NOTE: Debian specific issue as respective scripts are overwritten in Debian
 	NOTE: packaging as wrappers invoking python -m.
 CVE-2019-7649 (global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies  ...)


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[28 Dec 2021] DLA-2861-1 rdflib - security update
+	{CVE-2019-7653}
+	[stretch] - rdflib 4.2.1-2+deb9u1
 [28 Dec 2021] DLA-2860-1 paramiko - security update
 	{CVE-2018-7750 CVE-2018-1000805}
 	[stretch] - paramiko 2.0.0-1+deb9u1


=====================================
data/dla-needed.txt
=====================================
@@ -87,8 +87,6 @@ python-gnupg (Utkarsh)
   NOTE: 20211228: CVE-2019-6690 was fixed for jessie in DLA-1675-1
   NOTE: 20211228: but is unfixed in stretch (bunk)
 --
-rdflib (Adrian Bunk)
---
 samba (Utkarsh Gupta)
   NOTE: 20211128: WIP https://salsa.debian.org/lts-team/packages/samba/
   NOTE: 20211212: Fix is too large, coordination with ELTS-upload



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/68a50ea04dabdc606a38815e6d5fdcb6e992ffe9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/68a50ea04dabdc606a38815e6d5fdcb6e992ffe9
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211228/4e34a5b5/attachment.htm>


More information about the debian-security-tracker-commits mailing list