[Git][security-tracker-team/security-tracker][master] Reserve DLA number for sudo update
Salvatore Bonaccorso
carnil at debian.org
Tue Jan 26 18:10:45 GMT 2021
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
fd512524 by Salvatore Bonaccorso at 2021-01-26T19:10:24+01:00
Reserve DLA number for sudo update
- - - - -
2 changed files:
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[26 Jan 2021] DLA-2534-1 sudo - security update
+ {CVE-2021-3156}
+ [stretch] - sudo 1.8.19p1-2.1+deb9u3
[25 Jan 2021] DLA-2533-1 crmsh - security update
{CVE-2020-35459}
[stretch] - crmsh 2.3.2-4+deb9u1
=====================================
data/dla-needed.txt
=====================================
@@ -138,8 +138,6 @@ spotweb (Sylvain Beucler)
NOTE: 20201220: Upstream's "fix" is to blacklist all the "bad" SQL commands. (roberto)
NOTE: 20210122: Upstream fix trivially bypassed, reported at https://github.com/spotweb/spotweb/issues/653
--
-sudo (Salvatore Bonaccorso)
---
thunderbird (Emilio)
--
tzdata (Emilio)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fd5125249e97b0c8b43dc5664c92ae26a070eea0
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fd5125249e97b0c8b43dc5664c92ae26a070eea0
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210126/ed227e1e/attachment.html>
More information about the debian-security-tracker-commits
mailing list