Author: apo
Date: 2016-05-19 19:37:39 +0000 (Thu, 19 May 2016)
New Revision: 41896

Modified:
   data/CVE/list
   data/dla-needed.txt
Log:
Mark sogo as unsupported in Wheezy LTS.


Modified: data/CVE/list
===================================================================
--- data/CVE/list       2016-05-19 19:33:39 UTC (rev 41895)
+++ data/CVE/list       2016-05-19 19:37:39 UTC (rev 41896)
@@ -23683,6 +23683,8 @@
 CVE-2015-5395 [CSRF]
        RESERVED
        - sogo <unfixed> (bug #796197)
+       [wheezy] - sogo <end-of-life> (not supported in Wheezy LTS)
+       NOTE: https://lists.debian.org/debian-lts/2016/05/msg00197.html
        NOTE: http://www.openwall.com/lists/oss-security/2015/07/07/10
        NOTE: http://www.sogo.nu/bugs/view.php?id=3246
        NOTE: 
https://github.com/inverse-inc/sogo/commit/582baf2960969c73f98643e46cfb49432c30b711
 (SOGo-3.1.0)

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt 2016-05-19 19:33:39 UTC (rev 41895)
+++ data/dla-needed.txt 2016-05-19 19:37:39 UTC (rev 41896)
@@ -104,9 +104,6 @@
 samba
   NOTE: regression update required for #821811, patches available
 --
-sogo
-  NOTE: Solved in 3.1.0 according to upstream. Sid has 2.2.17 so far.
---
 squid
 --
 tardiff


_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

Reply via email to