[Git][security-tracker-team/security-tracker][master] 2 commits: data/dla-needed.txt: Correct ordering

Chris Lamb (@lamby) lamby at debian.org
Wed Jan 26 16:58:49 GMT 2022



Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
729f1342 by Chris Lamb at 2022-01-26T08:56:49-08:00
data/dla-needed.txt: Correct ordering

- - - - -
cdb39541 by Chris Lamb at 2022-01-26T08:58:39-08:00
data/dla-needed.txt: Triage uriparser for stretch LTS (CVE-2021-46141)

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -18,12 +18,12 @@ ansible
   NOTE: 20210411: after that LTS. (apo)
   NOTE: 20210426: https://people.debian.org/~apo/lts/ansible/
 --
+apache-log4j1.2
+--
 apache2 (Anton)
   NOTE: 20220109: WIP https://salsa.debian.org/lts-team/packages/apache2 (Anton)
   NOTE: 20220124: WIP
 --
-apache-log4j1.2
---
 apng2gif
   NOTE: 20211229: CVE-2017-6960 was fixed in DLAs for wheezy and jessie
   NOTE: 20211229: but is unfixed in stretch, plus 2 additional CVEs (bunk)
@@ -96,6 +96,9 @@ samba (Utkarsh Gupta)
 ujson (Anton)
   NOTE: 20220121: please reheck, at least the mentioned function is available in Stretch
 --
+uriparser (lamby)
+  NOTE: 20220126: Fix for CVE-2021-46141 in DLA 2883-1 was incomplete; missing a hunk. (lamby)
+--
 vim (Emilio)
 --
 wpa



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/eb1bc0e9bc35ccb97406dee1e79ce9c18a38b905...cdb3954180f8c144ce25a0ae4ef6106e80874f13

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/eb1bc0e9bc35ccb97406dee1e79ce9c18a38b905...cdb3954180f8c144ce25a0ae4ef6106e80874f13
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220126/8d7e8077/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list