[Git][security-tracker-team/security-tracker][master] Reserve DLA-2514-1 for flac

[Adrian Bunk]

Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ee759138 by Adrian Bunk at 2021-01-04T02:29:19+02:00
Reserve DLA-2514-1 for flac

- - - - -


2 changed files:

- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[04 Jan 2021] DLA-2514-1 flac - security update
+	{CVE-2017-6888 CVE-2020-0499}
+	[stretch] - flac 1.3.2-2+deb9u1
 [04 Jan 2021] DLA-2513-1 p11-kit - security update
 	{CVE-2020-29361 CVE-2020-29362}
 	[stretch] - p11-kit 0.23.3-2+deb9u1


=====================================
data/dla-needed.txt
=====================================
@@ -48,10 +48,6 @@ f2fs-tools
 firmware-nonfree
   NOTE: 20201207: wait for the update in buster and backport that (Emilio)
 --
-flac (Adrian Bunk)
-  NOTE: 20201215: when preparing fix/advisory note that the same code change fixes both CVE-2020-0487 and CVE-2017-6888 (roberto)
-  NOTE: 20201215: stretch and buster versions are very close; perhaps consider coordinating with security team and helping them by preparing an update for buster (roberto)
---
 golang-1.7
   NOTE: 20201219: new CVEs may not be getting fixed, might need to ignore (roberto)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ee7591388275c537447796d8cf86e51c202c919b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ee7591388275c537447796d8cf86e51c202c919b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210104/8b9a535c/attachment.html>