[Git][security-tracker-team/security-tracker][master] LTS: Add missing meta information in packages

Anton Gladky (@gladk) gladk at debian.org
Wed Jan 11 06:13:14 GMT 2023



Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker


Commits:
14dce102 by Anton Gladky at 2023-01-11T07:13:02+01:00
LTS: Add missing meta information in packages

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -55,6 +55,7 @@ erlang
   NOTE: 20221119: Programming language: Erlang.
   NOTE: 20221119: at least CVE-2022-37026 needs to be fixed (original request has been for Stretch)
   NOTE: 20230111: VCS: https://salsa.debian.org/erlang-team/packages/erlang
+  NOTE: 20230111: Maintainer notes: Coordinate with maintainer, whether their VCS can be used.
 --
 fig2dev
   NOTE: 20230105: Programming language: C.
@@ -78,6 +79,7 @@ golang-1.11
   NOTE: 20220916: Special attention: limited support; requires rebuilding reverse build dependencies (though recent bullseye updates didn't)
   NOTE: 20220916: Harmonize with bullseye and stretch: 9 CVEs fixed in Debian 11.2 & 11.3 + 2 CVEs fixed in stretch-lts (Beuc/front-desk)
   NOTE: 20220916: CVE-2020-28367 CVE-2021-33196 CVE-2021-36221 CVE-2021-39293 CVE-2021-41771 CVE-2021-44716 CVE-2021-44717 CVE-2022-23772 CVE-2022-23773 CVE-2022-23806 CVE-2022-24921
+  NOTE: 20230111: Testsuite: https://lts-team.pages.debian.net/wiki/TestSuites/golang.html
 --
 golang-github-nats-io-jwt
   NOTE: 20221109: Programming language: Go.
@@ -151,6 +153,7 @@ libxstream-java
   NOTE: 20221231: Testsuite: https://lts-team.pages.debian.net/wiki/TestSuites/libxstream-java.html
 --
 linux (Ben Hutchings)
+  NOTE: 20230111: Programming language: C
 --
 man2html
   NOTE: 20221004: Programming language: C.
@@ -334,6 +337,7 @@ snakeyaml
 snort
   NOTE: 20220905: Requires further triaging to conclude exactly which CVEs to be fixed or ignored.
   NOTE: 20230111: VCS: https://salsa.debian.org/lts-team/packages/snort.git
+  NOTE: 20230111: Programming language: C
 --
 sox
   NOTE: 20220818: Programming language: C.
@@ -370,6 +374,7 @@ xdg-utils
   NOTE: 20221120: Programming language: C.
   NOTE: 20221120: no real fix yet
   NOTE: 20230111: VCS: https://salsa.debian.org/freedesktop-team/xdg-utils
+  NOTE: 20230111: Maintainer notes: Coordinate with maintainer, whether their VCS can be used
 --
 xfig
   NOTE: 20230105: Programming language: C.



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/14dce10205c0e7eb2b3ccbd6b5883ac0af57b4e5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/14dce10205c0e7eb2b3ccbd6b5883ac0af57b4e5
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230111/e8d3caed/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list