[Git][security-tracker-team/security-tracker][master] 2 commits: Remove composer from dla-needed.txt

[Markus Koschany (@apo)]

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a8961729 by Markus Koschany at 2022-05-07T00:38:23+02:00
Remove composer from dla-needed.txt

The vulnerable getFileContent function was introduced in November 2016 and does
not exist in Stretch.

https://github.com/composer/composer/commit/597f834ae998ea80797879f4259e8e6accff4a4b

The getBranches function is missing the check to filter branch names starting
with a - character but this alone is not worth fixing. I agree with the current
triaging as no-dsa. The getBranches function can be fixed later.

- - - - -
a5de7d44 by Markus Koschany at 2022-05-07T00:41:26+02:00
Claim ark in dla-needed.txt

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -29,7 +29,7 @@ ansible
 asterisk (Abhijith PA)
   NOTE: 20220424: programming language C
 --
-ark
+ark (Markus Koschany)
   NOTE: 20220424: programming language C
 --
 cgal
@@ -38,10 +38,6 @@ cgal
 ckeditor (Sylvain Beucler)
   NOTE: 20220402: multiple pendings vulnerabilities (Beuc)
 --
-composer: (Markus Koschany)
-  NOTE: 20220424: programming language PHP
-  NOTE: 20220424: check whether really affected (Anton)
---
 debian-security-support (Utkarsh)
   NOTE: 20220402: need to update the list of unsupported packages (Beuc)
   NOTE: 20220402: check debian/README.source, sync with h01ger, and announce EOL'd packages (Beuc)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/c1c0aa15af09b3b6e68be8fe93b71747e81093f3...a5de7d445e0a7414a6dda2fef20e45b2fe4ee108

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/c1c0aa15af09b3b6e68be8fe93b71747e81093f3...a5de7d445e0a7414a6dda2fef20e45b2fe4ee108
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220506/439b6281/attachment.htm>