[Git][security-tracker-team/security-tracker][master] dla: sync with lts packages database

Sylvain Beucler (@beuc) beuc at debian.org
Fri May 26 20:52:45 BST 2023



Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5dc6639b by Sylvain Beucler at 2023-05-26T21:52:08+02:00
dla: sync with lts packages database

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -65,7 +65,7 @@ golang-yaml.v2 (sgmoore)
   NOTE: 20230525: In review with utkarsh.
 --
 hdf5
-  NOTE: 20230318: Programming language: C.
+  NOTE: 20230318: Programming language: C/C++.
   NOTE: 20230318: VCS: https://salsa.debian.org/lts-team/packages/hdf5.git
   NOTE: 20230318: Consider fixing all the no-dsa and postponed issues as well. (utkarsh)
   NOTE: 20230318: Enrico did some work around hdf5* packaging in the past, probably
@@ -122,7 +122,6 @@ nova
 --
 nvidia-cuda-toolkit
   NOTE: 20230514: Programming language: binary blobs.
-  NOTE: 20230514: VCS: https://salsa.debian.org/lts-team/packages/nvidia-cuda-toolkit.git
   NOTE: 20230514: package listed in packages-to-support; a bunch of CVEs have
   NOTE: 20230514: piled up. (utkarsh)
 --
@@ -164,7 +163,7 @@ python-oslo.privsep
   NOTE: 20230525: It was mentioned the fix was easy but tedious. It is consumer design flaw issue.
 --
 python3.7
-  NOTE: 20230220: Programming language: Python.
+  NOTE: 20230220: Programming language: C, Python.
   NOTE: 20230220: VCS: https://salsa.debian.org/lts-team/packages/python3.7.git
   NOTE: 20230220: Testsuite: https://lts-team.pages.debian.net/wiki/TestSuites/python.html
   NOTE: 20230228: Waiting for actual upstream fix for CVE-2023-24329. (bunk)
@@ -194,7 +193,7 @@ rainloop
   NOTE: 20230206: VCS: https://salsa.debian.org/lts-team/packages/rainloop.git
 --
 ring (Thorsten Alteholz)
-  NOTE: 20221120: Programming language: C.
+  NOTE: 20221120: Programming language: C++.
   NOTE: 20230111: VCS: https://salsa.debian.org/lts-team/packages/ring.git
   NOTE: 20230507: testing package
   NOTE: 20230521: an RCE CVE of cups-filter made a mess of the timing
@@ -234,5 +233,7 @@ sysstat (Sylvain Beucler)
   NOTE: 20230524: Programming language: C.
 --
 webkit2gtk (Emilio)
+  Programming language: C++.
+  VCS: https://salsa.debian.org/webkit-team/webkit.git
   NOTE: 20230512: checking if upgrade to 2.40.x is possible, otherwise we'll have to EOL webkit (pochu)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5dc6639bcc5a634066eddf01e5ec492ad4b9b43c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5dc6639bcc5a634066eddf01e5ec492ad4b9b43c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230526/429ce155/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list