[Git][security-tracker-team/security-tracker][master] Reserve DLA-3546-1 for opendmarc

Chris Lamb (@lamby) lamby at debian.org
Mon Aug 28 18:28:02 BST 2023



Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ef557ace by Chris Lamb at 2023-08-28T10:27:41-07:00
Reserve DLA-3546-1 for opendmarc

- - - - -


3 changed files:

- data/CVE/list
- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -243616,7 +243616,6 @@ CVE-2020-12273 (In TestLink 1.9.20, a crafted login.php viewer parameter exposes
 	NOT-FOR-US: TestLink
 CVE-2020-12272 (OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentic ...)
 	- opendmarc 1.4.0~beta1+dfsg-4 (bug #977767)
-	[buster] - opendmarc <no-dsa> (Minor issue)
 	[stretch] - opendmarc <postponed> (Minor issue; can be fixed in next update)
 	NOTE: https://sourceforge.net/p/opendmarc/tickets/237/
 	NOTE: https://www.usenix.org/system/files/sec20fall_chen-jianjun_prepub_0.pdf


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[28 Aug 2023] DLA-3546-1 opendmarc - security update
+	{CVE-2020-12272}
+	[buster] - opendmarc 1.3.2-6+deb10u3
 [28 Aug 2023] DLA-3545-1 flask-security - security update
 	{CVE-2021-23385}
 	[buster] - flask-security 1.7.5-2+deb10u1


=====================================
data/dla-needed.txt
=====================================
@@ -115,11 +115,6 @@ nvidia-cuda-toolkit
 opendkim
   NOTE: 20230821: Added by Front-Desk (ta)
 --
-opendmarc (Chris Lamb)
-  NOTE: 20230811: Added by Front-Desk (Beuc)
-  NOTE: 20230810: Experimental issue-based workflow: please self-assign and follow https://salsa.debian.org/lts-team/lts-updates-tasks/-/issues/34
-  NOTE: 20230828: Reclaiming; will release today/tomorrow after testing.
---
 openjdk-11
   NOTE: 20230419: Added by Front-Desk (ola)
   NOTE: 20230522: waiting for sid update (pochu)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ef557ace9f6fa058e4faad62d60127fceea7f019

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ef557ace9f6fa058e4faad62d60127fceea7f019
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230828/4b35baa4/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list