Adrian Bunk pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ee759138 by Adrian Bunk at 2021-01-04T02:29:19+02:00
Reserve DLA-2514-1 for flac
- - - - -
2 changed files:
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[04 Jan 2021] DLA-2514-1 flac - security update
+ {CVE-2017-6888 CVE-2020-0499}
+ [stretch] - flac 1.3.2-2+deb9u1
[04 Jan 2021] DLA-2513-1 p11-kit - security update
{CVE-2020-29361 CVE-2020-29362}
[stretch] - p11-kit 0.23.3-2+deb9u1
=====================================
data/dla-needed.txt
=====================================
@@ -48,10 +48,6 @@ f2fs-tools
firmware-nonfree
NOTE: 20201207: wait for the update in buster and backport that (Emilio)
--
-flac (Adrian Bunk)
- NOTE: 20201215: when preparing fix/advisory note that the same code change
fixes both CVE-2020-0487 and CVE-2017-6888 (roberto)
- NOTE: 20201215: stretch and buster versions are very close; perhaps consider
coordinating with security team and helping them by preparing an update for
buster (roberto)
---
golang-1.7
NOTE: 20201219: new CVEs may not be getting fixed, might need to ignore
(roberto)
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ee7591388275c537447796d8cf86e51c202c919b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ee7591388275c537447796d8cf86e51c202c919b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
