[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage busybox for stretch LTS (CVE-2021-28831).

[Chris Lamb]

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f46db691 by Chris Lamb at 2021-03-19T11:22:38+00:00
data/dla-needed.txt: Triage busybox for stretch LTS (CVE-2021-28831).

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -17,6 +17,10 @@ ansible (Markus Koschany)
   20210308: As discussed with the maintainer I will update Buster first and
   20210308: after that LTS. Buster update almost complete now.
 --
+busybox
+  NOTE: 20210319: Version in LTS is missing BAD_HUFT check in the patch, so perhaps
+  NOTE: 20210319: we are missing other vulnerabilities in this file. (lamby)
+--
 ceph
   NOTE: 20200707: Vulnerable to at least CVE-2018-14662. (lamby)
   NOTE: 20200707: Some discussion regarding removal <https://lists.debian.org/debian-lts/2020/04/msg00019.html> (lamby)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f46db691775a88acabca92585a1ca88a7ac3fd06

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f46db691775a88acabca92585a1ca88a7ac3fd06
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210319/7bc0e166/attachment.htm>