Author: anarcat
Date: 2017-04-26 00:21:44 +0000 (Wed, 26 Apr 2017)
New Revision: 51049
Modified:
data/CVE/list
data/dla-needed.txt
Log:
yaml-cpp: sent fix proposal upstream for review
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-04-25 23:13:42 UTC (rev 51048)
+++ data/CVE/list 2017-04-26 00:21:44 UTC (rev 51049)
@@ -6399,6 +6399,7 @@
- yaml-cpp0.3 <unfixed> (low; bug #859892)
[jessie] - yaml-cpp0.3 <no-dsa> (Minor issue)
NOTE: https://github.com/jbeder/yaml-cpp/issues/459
+ NOTE: possible fix: https://github.com/jbeder/yaml-cpp/pull/489
CVE-2017-5949 (JavaScriptCore in WebKit, as distributed in Safari Technology
Preview ...)
- webkitgtk <unfixed> (unimportant)
NOTE: Not covered by security support
Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt 2017-04-25 23:13:42 UTC (rev 51048)
+++ data/dla-needed.txt 2017-04-26 00:21:44 UTC (rev 51049)
@@ -111,6 +111,7 @@
xen
--
yaml-cpp (Antoine Beaupre)
+ NOTE: fix sent upstream, waiting for review
--
zoneminder
NOTE: Sql injection and session fixation vulerability fixes:
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
