[Git][security-tracker-team/security-tracker][master] Reserve DLA-2790-1 for python-babel

Sylvain Beucler (@beuc) beuc at debian.org
Thu Oct 21 08:54:15 BST 2021



Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6e4fb9be by Sylvain Beucler at 2021-10-21T09:51:50+02:00
Reserve DLA-2790-1 for python-babel

- - - - -


2 changed files:

- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[21 Oct 2021] DLA-2790-1 python-babel - security update
+	{CVE-2021-20095 CVE-2021-42771}
+	[stretch] - python-babel 2.3.4+dfsg.1-2+deb9u1
 [20 Oct 2021] DLA-2789-1 squashfs-tools - security update
 	{CVE-2021-41072}
 	[stretch] - squashfs-tools 1:4.3-3+deb9u3


=====================================
data/dla-needed.txt
=====================================
@@ -67,13 +67,6 @@ openssh (Utkarsh)
   NOTE: 20211018: the regression doesn't happen for stretch; looking at
   NOTE: 20211018: the other bit. (utkarsh)
 --
-python-babel (Sylvain Beucler)
-  NOTE: 20210617: CVE-2021-20095 withdrawn, cf. 251b6e33 and #987824 (abhijith)
-  NOTE: 20210620: http://people.debian.org/~abhijith/backport_of_3a700b5.patch (abhijith)
-  NOTE: 20210620: Revisit when it has an assigned CVE ID (abhijith)
-  NOTE: 20211018: No new CVE, asked initial reporter (Beuc)
-  NOTE: 20211018: https://lists.debian.org/debian-lts/2021/10/msg00039.html
---
 python3.5 (Utkarsh)
   NOTE: 20211003: whilst looks like a no-dsa/postponed candidate on a
   NOTE: 20211003: quick look, Canonical issued an update via the ESM



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e4fb9be53b3a574cd5f0e7f426a4f83f32ff88d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e4fb9be53b3a574cd5f0e7f426a4f83f32ff88d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211021/5611b008/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list