[Git][security-tracker-team/security-tracker][master] Update snakeyaml NOTE and claim powerline-gitstatus in dla-needed.txt

[Markus Koschany (@apo)]

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cc06d940 by Markus Koschany at 2023-01-20T00:30:48+01:00
Update snakeyaml NOTE and claim powerline-gitstatus in dla-needed.txt

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -230,7 +230,7 @@ pluxml
   NOTE: 20220913: Programming language: PHP.
   NOTE: 20220913: Special attention: orphaned package.
 --
-powerline-gitstatus
+powerline-gitstatus (Markus Koschany)
   NOTE: 20230105: Programming language: Python.
   NOTE: 20230105: Follow fixes from bullseye 11.6 (Beuc/front-desk)
 --
@@ -309,6 +309,8 @@ samba
 --
 snakeyaml
   NOTE: 20230101: Programming language: Java.
+  NOTE: 20230120: There is ongoing upstream discussion at
+  NOTE: 20230120: https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479
 --
 snort
   NOTE: 20220905: Requires further triaging to conclude exactly which CVEs to be fixed or ignored.



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cc06d94050c7b8e5d65def945f50f75c9eb2de23

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cc06d94050c7b8e5d65def945f50f75c9eb2de23
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230119/ae301fe2/attachment.htm>