Abhijith PA pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
69aeebe3 by Abhijith PA at 2021-03-02T21:55:35+05:30
Reserve DLA-2579-1 for spip
- - - - -
2 changed files:
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,5 @@
+[02 Mar 2021] DLA-2579-1 spip - security update
+ [stretch] - spip 3.1.4-4~deb9u4+deb9u1
[01 Mar 2021] DLA-2578-1 thunderbird - security update
{CVE-2021-23968 CVE-2021-23969 CVE-2021-23973 CVE-2021-23978}
[stretch] - thunderbird 1:78.8.0-1~deb9u1
=====================================
data/dla-needed.txt
=====================================
@@ -122,10 +122,6 @@ shiro
NOTE: 20201004: Sent additional request to upstream dev list; stil no
response. (roberto)
NOTE: 20201220: Upstream has responded. Working with them to backport
fixes. (roberto)
--
-spip (Abhijith PA)
- NOTE: 20210228: maintainer doesn't want to work on this update. (utkarsh)
- NOTE: 20210228: a DSA is already out; check against the patch uploaded.
(utkarsh)
---
spotweb
NOTE: 20201220: The affected code uses string concatenation to construct a
SQL query.
NOTE: 20201220: Upstream's "fix" is to blacklist all the "bad" SQL commands.
(roberto)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/69aeebe33af914dc6cf1c494432be80b9a2a730a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/69aeebe33af914dc6cf1c494432be80b9a2a730a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
