[Git][security-tracker-team/security-tracker][master] 2 commits: Triage spip for stretch

[Utkarsh Gupta]

Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bec54dd9 by Utkarsh Gupta at 2021-03-01T02:24:54+05:30
Triage spip for stretch

- - - - -
60ffd294 by Utkarsh Gupta at 2021-03-01T02:24:54+05:30
Triage python-aiohttp for stretch

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -81,6 +81,8 @@ php-pear (Ola Lundqvist)
 python3.5
   NOTE: 20210217: Fairly invasive change, changing/augmenting API of standard library. (lamby)
 --
+python-aiohttp (Utkarsh)
+--
 ruby-actionpack-page-caching
   NOTE: 20200819: Upstream's patch on does not apply due to subsequent
   NOTE: 20200819: refactoring. However, a quick look at the private
@@ -113,6 +115,10 @@ shiro
   NOTE: 20201004: Sent additional request to upstream dev list; stil no response. (roberto)
   NOTE: 20201220: Upstream has responded.  Working with them to backport fixes. (roberto)
 --
+spip
+  NOTE: 20210228: maintainer doesn't want to work on this update. (utkarsh)
+  NOTE: 20210228: a DSA is already out; check against the patch uploaded. (utkarsh)
+--
 spotweb
   NOTE: 20201220: The affected code uses string concatenation to construct a SQL query.
   NOTE: 20201220: Upstream's "fix" is to blacklist all the "bad" SQL commands. (roberto)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/0845da06e2129bbdff94c6f0cbf0233dfc31aaf9...60ffd294e190689e1a8f063816e40e25a2c78bf2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/0845da06e2129bbdff94c6f0cbf0233dfc31aaf9...60ffd294e190689e1a8f063816e40e25a2c78bf2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210228/9ec330b3/attachment-0001.htm>