Antoine Beaupré pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
578a74fd by Antoine Beaupré at 2018-09-26T18:31:22Z
postpone the pending python issues in LTS
I just released a DLA without those and the new issue is fairly
minor (XML DoS by resource exhaustion)
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -6817,7 +6817,9 @@ CVE-2018-14647 (Python's elementtree C accelerator failed
to initialise Expat's
- python3.6 <unfixed>
- python3.5 <unfixed>
- python3.4 <removed>
+ [jessie] - python3.4 <postponed> (minor issue)
- python2.7 <unfixed>
+ [jessie] - python2.7 <postponed> (minor issue)
NOTE: https://bugs.python.org/issue34623
NOTE: master:
https://github.com/python/cpython/commit/cb5778f00ce48631c7140f33ba242496aaf7102b
NOTE: 3.7:
https://github.com/python/cpython/commit/470a435f3b42c9be5fdb7f7b04f3df5663ba7305
=====================================
data/dla-needed.txt
=====================================
@@ -70,10 +70,6 @@ openjpeg2 (Hugo Lefeuvre)
phpldapadmin (Mike Gabriel)
NOTE: 20180731: See
https://lists.debian.org/debian-lts/2018/07/msg00123.html for research already
done
--
-python2.7 (Antoine Beaupre)
---
-python3.4 (Antoine Beaupre)
---
salt
NOTE: 20180921: CVE-2017-7893 is not crucial since the managed system must be
NOTE: 20180921: compromised first. But the security escalation effect can
cause
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/578a74fdf17f162868686088674fa0bd25c06f3e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/578a74fdf17f162868686088674fa0bd25c06f3e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
