[Git][security-tracker-team/security-tracker][master] lts: take tzdata and libdatetime-timezone-perl
Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 564e0e87 by Emilio Pozuelo Monfort at 2024-04-17T10:34:36+02:00 lts: take tzdata and libdatetime-timezone-perl - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -112,8 +112,9 @@ knot-resolver (Markus Koschany) NOTE: 20240310: Dropped from dla-needed.txt (ola/front-desk) NOTE: 20240311: Reverted decision to remove from dla-needed since four CVEs has been fixed in bullseye. (ola) -- -libdatetime-timezone-perl +libdatetime-timezone-perl (Emilio) NOTE: 20240327: Added by pochu + NOTE: 20240417: Blocked by tzdata update (Emilio) -- libpgjava (Markus Koschany) NOTE: 20240308: Added by Front-Desk (opal) @@ -287,8 +288,9 @@ tinymce NOTE: 20231216: upstream's patch is backportable, as the code has changed a NOTE: 20231216: lot. (spwhitton) -- -tzdata +tzdata (Emilio) NOTE: 20240327: Added by pochu + NOTE: 20240417: updating to latest upstream instead of cherry-picking (Emilio) -- varnish NOTE: 20231117: Added by Front-Desk (apo) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/564e0e879335799a577dab57168db7858ded3b07 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/564e0e879335799a577dab57168db7858ded3b07 You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] lts: take tzdata and libdatetime-timezone-perl
Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 9e7a0619 by Emilio Pozuelo Monfort at 2024-03-27T11:49:13+01:00 lts: take tzdata and libdatetime-timezone-perl - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -111,6 +111,9 @@ knot-resolver NOTE: 20240310: Dropped from dla-needed.txt (ola/front-desk) NOTE: 20240311: Reverted decision to remove from dla-needed since four CVEs has been fixed in bullseye. (ola) -- +libdatetime-timezone-perl (Emilio) + NOTE: 20240327: Added by pochu +-- libpgjava NOTE: 20240308: Added by Front-Desk (opal) -- @@ -273,6 +276,9 @@ tiff (Abhijith PA) tomcat9 (Markus Koschany) NOTE: 20240121: Added by Front-Desk (apo) -- +tzdata (Emilio) + NOTE: 20240327: Added by pochu +-- varnish NOTE: 20231117: Added by Front-Desk (apo) NOTE: 20231204: Working on pre commits for CVE-2023-44487, https://github.com/varnishcache/varnish-cache/pull/4004 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9e7a0619c39062532f46cf47661e835112f7400e -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9e7a0619c39062532f46cf47661e835112f7400e You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] lts: take tzdata
Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 0f35a06b by Emilio Pozuelo Monfort at 2023-12-06T11:29:10+01:00 lts: take tzdata - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -223,6 +223,9 @@ tomcat9 tor NOTE: 20231119: Added by Front-Desk (apo) -- +tzdata (Emilio) + NOTE: 20231206: Added by pochu +-- varnish (Abhijith PA) NOTE: 20231117: Added by Front-Desk (apo) NOTE: 20231204: Working on pre commits for CVE-2023-44487, https://github.com/varnishcache/varnish-cache/pull/4004 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f35a06bf4ea12fc9ddc9f3d5e9af720069f983d -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f35a06bf4ea12fc9ddc9f3d5e9af720069f983d You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] lts: take tzdata and libdatetime-timezone-perl
Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 890b336d by Emilio Pozuelo Monfort at 2023-05-02T11:45:27+02:00 lts: take tzdata and libdatetime-timezone-perl - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -88,6 +88,8 @@ hdf5 NOTE: 20230318: Enrico did some work around hdf5* packaging in the past, probably NOTE: 20230318: sync w/ him. (utkarsh) -- +libdatetime-timezone-perl (Emilio) +-- linux (Ben Hutchings) NOTE: 20230111: Programming language: C -- @@ -261,3 +263,5 @@ tinymce NOTE: 20221227: Programming language: PHP. NOTE: 20230206: VCS: https://salsa.debian.org/lts-team/packages/tinymce.git -- +tzdata (Emilio) +-- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/890b336d332ec5a4835e64fc00c5b8a2e791cab4 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/890b336d332ec5a4835e64fc00c5b8a2e791cab4 You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] lts: take tzdata and libdatetime-timezone-perl
Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: af4dcaee by Emilio Pozuelo Monfort at 2023-03-24T10:21:01+01:00 lts: take tzdata and libdatetime-timezone-perl - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -125,6 +125,8 @@ intel-microcode (tobi) NOTE: 20230312: uploaded to DELAYED/5 for unstable. NOTE: 20230317: now in unstable. prepared SPU for bullseye (#1033079), prepared update for buster, stretch and jessie, available in LTS repo. (tobi) -- +libdatetime-timezone-perl (Emilio) +-- libmicrohttpd (Thorsten Alteholz) NOTE: 20230313: Programming language: C. -- @@ -329,6 +331,8 @@ trafficserver NOTE: 20230209: could find informatin for CVE-2022-31779, might be the same fix as CVE-2022-31778 (marked as to be ignored), but no proof on that… NOTE: 20230209: not sure, maybe the safest way would be to update to 8.1.6. -- +tzdata (Emilio) +-- wordpress (guilhem) NOTE: 20230302: Programming language: PHP. NOTE: 20230302: Testsuite: https://lts-team.pages.debian.net/wiki/TestSuites/wordpress.html View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/af4dcaeebebf9d4373cc12675256685d69660e42 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/af4dcaeebebf9d4373cc12675256685d69660e42 You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] lts: take tzdata and libdatetime-timezone-perl
Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 2bdb7161 by Emilio Pozuelo Monfort at 2022-10-26T07:47:35+02:00 lts: take tzdata and libdatetime-timezone-perl - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -86,6 +86,8 @@ kopanocore NOTE: 20220801: Programming language: C++. NOTE: 20220811: Proposed a patch to CVE-2022-26562 (#1016973) -- +libdatetime-timezone-perl (Emilio) +-- libreoffice NOTE: 20221012: Programming language: C++. -- @@ -195,6 +197,8 @@ sox -- thunderbird (Emilio) -- +tzdata (Emilio) +-- trafficserver (Abhijith PA) NOTE: 20220905: Programming language: C. NOTE: 20221024: WIP, big changeset in security fix (abhijith) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2bdb716146051746f5a7ed02675a66688c2e9ea3 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2bdb716146051746f5a7ed02675a66688c2e9ea3 You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] lts: take tzdata and libdatetime-timezone-perl
Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 0eaf6527 by Emilio Pozuelo Monfort at 2022-09-30T17:33:19+02:00 lts: take tzdata and libdatetime-timezone-perl - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -82,6 +82,8 @@ kopanocore NOTE: 20220801: Programming language: C++. NOTE: 20220811: Proposed a patch to CVE-2022-26562 (#1016973) -- +libdatetime-timezone-perl (Emilio) +-- lighttpd (Helmut Grohne) NOTE: 20220928: Programming language: C. -- @@ -183,6 +185,8 @@ squid trafficserver NOTE: 20220905: Programming language: C. -- +tzdata (Emilio) +-- vim NOTE: 20220904: Programming language: C. NOTE: 20220904: VCS: https://salsa.debian.org/lts-team/packages/vim.git View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0eaf6527cf3e3f095013deead9aa20edecda4b6f -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0eaf6527cf3e3f095013deead9aa20edecda4b6f You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] lts: take tzdata
Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 67c53cb6 by Emilio Pozuelo Monfort at 2022-06-14T13:32:31+02:00 lts: take tzdata - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -314,6 +314,8 @@ tiff NOTE: 20220513: more CVEs, ugh. Probably will consider rolling out the ones NOTE: 20220513: that are already applied and tested and re-add tiff here. (utkarsh) -- +tzdata (Emilio) +-- ublock-origin NOTE: 20220529: Programming language: JavaScript. NOTE: 20220524: Follow buster: harmonize with with Debian 10.11 (1 CVE) (Beuc/front-desk) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/67c53cb6afa10440be1ac9cae11e4f774848e48f -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/67c53cb6afa10440be1ac9cae11e4f774848e48f You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] lts: take tzdata and libdatetime-timezone-perl
Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 729799c4 by Emilio Pozuelo Monfort at 2022-03-17T14:48:56+01:00 lts: take tzdata and libdatetime-timezone-perl - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -46,6 +46,8 @@ kicad libarchive (Thorsten Alteholz) NOTE: 20220225: fix seems to be incomplete -- +libdatetime-timezone-perl (Emilio) +-- libreoffice (Anton) -- linux (Ben Hutchings) @@ -85,6 +87,8 @@ snapd -- thunderbird (Emilio) -- +tzdata (Emilio) +-- wireshark (Markus Koschany) -- zabbix View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/729799c4dc780dada846828c158c64a1ad49ac4a -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/729799c4dc780dada846828c158c64a1ad49ac4a You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] lts: take tzdata and libdatetime-timezone-perl
Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: cc2c1b73 by Emilio Pozuelo Monfort at 2021-10-29T10:01:05+02:00 lts: take tzdata and libdatetime-timezone-perl - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -49,6 +49,8 @@ firmware-nonfree -- gpac (Roberto C. Sánchez) -- +libdatetime-timezone-perl (Emilio) +-- linux (Ben Hutchings) -- linux-4.19 (Ben Hutchings) @@ -96,3 +98,5 @@ salt (Markus Koschany) -- thunderbird -- +tzdata (Emilio) +-- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cc2c1b73b875895472a408ad751d2c41c65c83c8 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cc2c1b73b875895472a408ad751d2c41c65c83c8 You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] lts: take tzdata and libdatetime-timezone-perl
Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 62f3f4a0 by Emilio Pozuelo Monfort at 2020-12-23T09:19:36+01:00 lts: take tzdata and libdatetime-timezone-perl - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -78,6 +78,8 @@ intel-microcode NOTE: 20201122: Utkarsh will upload once its confirmed that there is no regression NOTE: 20201122: and is actively tracking it. (utkarsh) -- +libdatetime-timezone-perl (Emilio) +-- libhibernate3-java NOTE: 20201115: No patch yet; unsure if version in LTS is vulnerable. (lamby) -- @@ -180,6 +182,8 @@ spotweb NOTE: 20201220: Upstream's "fix" is to blacklist all the "bad" SQL commands. NOTE: 20201220: Yes, this is a dumpster fire. Claim this package at your own peril. (roberto) -- +tzdata (Emilio) +-- wireshark NOTE: 20201007: during last triage, I marked some CVEs as no-dsa, it'd be great to include NOTE: 20201007: those fixes as well! \o/ (utkarsh) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/62f3f4a08ec91ba63f781fd5fdfa9c115921c9f4 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/62f3f4a08ec91ba63f781fd5fdfa9c115921c9f4 You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
