Thorsten Alteholz pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a7986d38 by Thorsten Alteholz at 2021-06-29T07:47:46+02:00
follow security team and mark CVE-2021-3480 as no-dsa for Stretch
- - - - -
b71c2017 by Thorsten Alteholz at 2021-06-29T07:47:46+02:00
nothing todo anymore
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -13845,6 +13845,7 @@ CVE-2021-3480 (A flaw was found in slapi-nis in
versions before 0.56.7. A NULL p
- slapi-nis 0.56.5-2 (bug #988736)
[bullseye] - slapi-nis <no-dsa> (Minor issue)
[buster] - slapi-nis <no-dsa> (Minor issue)
+ [stretch] - slapi-nis <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1944640
NOTE:
https://pagure.io/slapi-nis/c/c7417ea2d534712e559b56ed45baa91c5d3d44db?branch=master
CVE-2021-3479 (There's a flaw in OpenEXR's Scanline API functionality in
versions bef ...)
=====================================
data/dla-needed.txt
=====================================
@@ -137,9 +137,6 @@ shiro
NOTE: 20201220: Upstream has responded. Working with them to backport
fixes. (roberto)
NOTE: 20210511: Upstream provided suggestions/guidance on testing of
backported fixes; testing/tweaking is in progress. (roberto)
--
-slapi-nis (Thorsten Alteholz)
- NOTE: 20210620: WIP
---
sogo (Anton Gladky)
NOTE: 20210603: maybe mention in announcement the recommendation to
invalidate user
NOTE: 20210603: sessions (see upstream blog). (pochu)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/9c683b317d099b67c4aff02385bd24f555c79728...b71c201726185dbecafd7b095fb8dd45e016c0f9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/9c683b317d099b67c4aff02385bd24f555c79728...b71c201726185dbecafd7b095fb8dd45e016c0f9
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
