Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker
Commits: ee759138 by Adrian Bunk at 2021-01-04T02:29:19+02:00 Reserve DLA-2514-1 for flac - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes: ===================================== data/DLA/list ===================================== @@ -1,3 +1,6 @@ +[04 Jan 2021] DLA-2514-1 flac - security update + {CVE-2017-6888 CVE-2020-0499} + [stretch] - flac 1.3.2-2+deb9u1 [04 Jan 2021] DLA-2513-1 p11-kit - security update {CVE-2020-29361 CVE-2020-29362} [stretch] - p11-kit 0.23.3-2+deb9u1 ===================================== data/dla-needed.txt ===================================== @@ -48,10 +48,6 @@ f2fs-tools firmware-nonfree NOTE: 20201207: wait for the update in buster and backport that (Emilio) -- -flac (Adrian Bunk) - NOTE: 20201215: when preparing fix/advisory note that the same code change fixes both CVE-2020-0487 and CVE-2017-6888 (roberto) - NOTE: 20201215: stretch and buster versions are very close; perhaps consider coordinating with security team and helping them by preparing an update for buster (roberto) --- golang-1.7 NOTE: 20201219: new CVEs may not be getting fixed, might need to ignore (roberto) -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ee7591388275c537447796d8cf86e51c202c919b -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ee7591388275c537447796d8cf86e51c202c919b You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits