Mike Gabriel pushed to branch master at Debian Security Tracker / security-tracker
Commits: 5f07c512 by Mike Gabriel at 2019-02-28T21:07:00Z data/dla-needed.txt: Update note on openssh. - - - - - 1 changed file: - data/dla-needed.txt Changes: ===================================== data/dla-needed.txt ===================================== @@ -88,6 +88,8 @@ openjdk-7 (Emilio) openssh (Mike Gabriel) NOTE: 20190227: Work in progress. First draft is still vulnerable to PoC: https://www.exploit-db.com/exploits/46193 NOTE: 20190227: Problematic is that jessie's / wheezy's versions don't have the utf8.(c|h) code, yet. Probably needs to be backported. + NOTE: 20190228: CVE-2019-6111 seemingly not-yet-fixed, see https://bugs.debian.org/923486 + NOTE: 20190228: Package draft for jessie LTS locally, but the CVE-2019-6111 patch requires being fixed first before proceeding -- openssl (Markus Koschany) -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5f07c5129d86a76ad235b909f03d1f11a51ab23a -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5f07c5129d86a76ad235b909f03d1f11a51ab23a You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
