[Git][security-tracker-team/security-tracker][master] 2 commits: LTS: update squid notes

[Roberto C. Sánchez (@roberto)]

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker


Commits:
03e52ead by Roberto C. Sánchez at 2024-10-28T05:14:21-04:00
LTS: update squid notes

- - - - -
26a6fada by Roberto C. Sánchez at 2024-10-28T05:15:48-04:00
semi-automatic unclaim after 2 weeks of inactivity

Signed-off-by: Roberto C. Sánchez <roberto at debian.org>

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -56,7 +56,7 @@ espeak-ng (Abhijith PA)
   NOTE: 20240929: Can be still reproduced (abhijith)
   NOTE: 20241014: Still looking at the incomplete fixes (abhijith)
 --
-exim4 (Markus Koschany)
+exim4
   NOTE: 20240815: Added by Front-Desk (Beuc)
   NOTE: 20240815: Follow fixes from bookworm 12.3 (2 CVEs)
   NOTE: 20240815: Consider fixing older postponed CVEs as well (Beuc/front-desk)
@@ -106,7 +106,7 @@ netatalk
 nvidia-cuda-toolkit
   NOTE: 20241004: Added by Front-Desk (Beuc)
 --
-opensc (guilhem)
+opensc
   NOTE: 20240815: Added by Front-Desk (Beuc)
   NOTE: 20240815: Follow fixes from buster DLA-3463-1 (5 CVEs) and bookworm 12.4 (2 CVEs) (Beuc/front-desk)
 --
@@ -144,12 +144,12 @@ python-aiohttp
   NOTE: 20240523: Added by oldstable Security Team (jmm)
   NOTE: 20240815: A bookworm DSA is planned (Beuc/front-desk)
 --
-python-git (dleidert)
+python-git
   NOTE: 20240815: Added by Front-Desk (Beuc)
   NOTE: 20240815: Follow fixes from buster DLA-3589-1, buster DLA-3502-1 and bookworm 12.2 (3 CVEs) (Beuc/front-desk)
   NOTE: 20241007: Waiting to hear back about why deb11u1 with the fix for CVE-2022-24439 was not released in July 2023 (dleidert)
 --
-python3.9 (Adrian Bunk)
+python3.9
   NOTE: 20240906: Added by Front-Desk (lamby)
 --
 qemu
@@ -186,12 +186,13 @@ squid (roberto)
   NOTE: 20240308: the fix for CVE-2023-5824 is kind of intrusive. (apo)
   NOTE: 20240815: A bookworm DSA is planned (Beuc/front-desk)
   NOTE: 20240930: Backported most patches, help will be needed with CVE-2024-25111 and CVE-2023-46846 (roberto)
+  NOTE: 20241028: Sorted out all the patch backports. Still need to test (roberto)
 --
 texlive-bin
   NOTE: 20240815: Added by Front-Desk (Beuc)
   NOTE: 20240815: Follow fixes from bookworm 12.1 (CVE-2023-32668) (Beuc/front-desk)
 --
-tomcat9 (Markus Koschany)
+tomcat9
   NOTE: 20240908: Added by (apo)
   NOTE: 20240923: Still working on patch backport. (apo)
   NOTE: 20241010: Will release shortly after exim4 at the beginning of next week. (apo)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/18dbb88eab1fcd75efb6e9f5ace7b0e3f4dce73e...26a6fada5bba9f2c3764986e91db518c712ab20e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/18dbb88eab1fcd75efb6e9f5ace7b0e3f4dce73e...26a6fada5bba9f2c3764986e91db518c712ab20e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241028/cf2b7d54/attachment-0001.htm>