[Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity

Jeremiah C. Foster (@jeremiah) gitlab at salsa.debian.org
Tue May 17 03:34:46 BST 2022



Jeremiah C. Foster pushed to branch master at Debian Security Tracker / security-tracker


Commits:
63d58345 by Jeremiah C. Foster at 2022-05-16T22:26:44-04:00
semi-automatic unclaim after 2 weeks of inactivity

Signed-off-by: Jeremiah C. Foster <jeremiah at jeremiahfoster.com>

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -33,7 +33,7 @@ asterisk (Abhijith PA)
 cgal
   NOTE: 20220421: many no-dsa issues, please check, whether it is possible to fix them without uploading a new upstream release (Anton)
 --
-ckeditor (Sylvain Beucler)
+ckeditor
   NOTE: 20220402: multiple pendings vulnerabilities (Beuc)
 --
 clamav (Emilio)
@@ -62,7 +62,7 @@ gerbv
 golang-go.crypto
   NOTE: 20220331: rebuild reverse-dependencies if needed, e.g. DLA-2402-1 -> DLA-2453-1/DLA-2454-1/DLA-2455-1; also check buster status (Beuc)
 --
-gpac (Roberto C. Sánchez)
+gpac
   NOTE: 20211101: coordinating with secteam for s-p-u since stretch/buster versions match (roberto)
   NOTE: 20211120: received OK from secteam for buster update, working on stretch/buster in parallel (roberto)
   NOTE: 20211228: Returning to active work on this now that llvm/rustc update is complete (roberto)
@@ -70,7 +70,7 @@ gpac (Roberto C. Sánchez)
   NOTE: 20220413: New CVEs continue flooding in (roberto)
   NOTE: 20220427: Preparing to work with security team to declare EOL (roberto)
 --
-icingaweb2 (Abhijith PA)
+icingaweb2
   NOTE: https://people.debian.org/~abhijith/upload/mruby/icingaweb2_2.4.1-1+deb9u2.dsc (abhijith)
 --
 intel-microcode (Stefano Rivera)
@@ -86,7 +86,7 @@ liblouis
   NOTE: 20220503: CVE-2022-26981 patch applied in salsa lts-team repo,
   NOTE: 20220503: Patch not applied upstream yet.
 --
-libpgjava (Markus Koschany)
+libpgjava
 --
 libvirt (Thorsten Alteholz)
   NOTE: 20220508: testing package
@@ -177,7 +177,7 @@ sox
   NOTE: 20220326: https://salsa.debian.org/lts-team/packages/sox
   NOTE: 20220326: fix for CVE-2021-40426 is not yet available (Anton)
 --
-subversion (Roberto C. Sánchez)
+subversion
   NOTE: 20220422: Upstream's patch for CVE-2021-28544 does not cleanly apply (eg. "copyfrom_path = apr_pstrdup(...)" assignment)
   NOTE: 20220422: and, once applied manually, appears to break multiple and possibly unrelated parts of the testsuite. (lamby)
   NOTE: 20220501: Done some analysis, worked on a patch, cannot find a way to test it, mailed results to Roberto C. Sánchez (enrico)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/63d58345a20951f0419a2fbfa3617181eda0ae84

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/63d58345a20951f0419a2fbfa3617181eda0ae84
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220517/74c90da0/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list