[Git][security-tracker-team/security-tracker][master] dla: drop libreoffice
Sylvain Beucler (@beuc)
beuc at debian.org
Mon Oct 18 14:18:30 BST 2021
Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker
Commits:
18f62d22 by Sylvain Beucler at 2021-10-18T15:17:57+02:00
dla: drop libreoffice
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -42632,6 +42632,7 @@ CVE-2021-25634 (LibreOffice supports digital signatures of ODF documents and mac
{DSA-4988-1}
- libreoffice 1:7.2.0-2
[buster] - libreoffice <ignored> (Risk doesn't warrant complex backport)
+ [stretch] - libreoffice <not-affected> (XAdES / xades:SigningTime support introduced in 5.3)
NOTE: https://www.libreoffice.org/about-us/security/advisories/CVE-2021-25634
NOTE: https://www.openwall.com/lists/oss-security/2021/10/11/2
NOTE: XAdES/xades:SigningTime support introduced in 5.3, but pre-requisite for CVE-2021-25633/25634 also introduces it
@@ -42646,6 +42647,7 @@ CVE-2021-25633 (LibreOffice supports digital signatures of ODF documents and mac
{DSA-4988-1}
- libreoffice 1:7.2.0-2
[buster] - libreoffice <ignored> (Risk doesn't warrant complex backport)
+ [stretch] - libreoffice <ignored> (Risk doesn't warrant complex backport)
NOTE: https://www.libreoffice.org/about-us/security/advisories/CVE-2021-25633
NOTE: https://www.openwall.com/lists/oss-security/2021/10/11/1
NOTE: Pre-requisites (replacement for XSecParser):
=====================================
data/dla-needed.txt
=====================================
@@ -43,8 +43,6 @@ firmware-nonfree
--
jsoup (Markus Koschany)
--
-libreoffice (Sylvain Beucler)
---
linux (Ben Hutchings)
--
linux-4.19 (Ben Hutchings)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/18f62d22d36499919d4ebcb819403860f898766a
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/18f62d22d36499919d4ebcb819403860f898766a
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211018/e63e0812/attachment.htm>
More information about the debian-security-tracker-commits
mailing list