Author: hertzog
Date: 2017-06-30 09:44:08 +0000 (Fri, 30 Jun 2017)
New Revision: 53033
Modified:
data/DLA/list
data/dla-needed.txt
Log:
Reserve DLA-1006-1 for libarchive
Modified: data/DLA/list
===================================================================
--- data/DLA/list 2017-06-30 09:16:42 UTC (rev 53032)
+++ data/DLA/list 2017-06-30 09:44:08 UTC (rev 53033)
@@ -1,3 +1,6 @@
+[30 Jun 2017] DLA-1006-1 libarchive - security update
+ {CVE-2016-10209 CVE-2016-10349 CVE-2016-10350}
+ [wheezy] - libarchive 3.0.4-3+wheezy6
[29 Jun 2017] DLA-1005-1 mercurial - security update
{CVE-2017-9462}
[wheezy] - mercurial 2.2.2-4+deb7u4
Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt 2017-06-30 09:16:42 UTC (rev 53032)
+++ data/dla-needed.txt 2017-06-30 09:44:08 UTC (rev 53033)
@@ -52,11 +52,6 @@
--
kdepim (Lucas Kanashiro)
--
-libarchive (Raphaël Hertzog)
- NOTE: I suggest to wait for more issues. Could not find more information
- NOTE: about the undetermined CVEs. Debdiff is at:
- NOTE: https://people.debian.org/~apo/libarchive/libarchive.debdiff
---
libav
NOTE: Diego Biurrun (from the libav team) is working on patches.
NOTE: undetermined issues are currently being triaged (Diego Biurrun and
Hugo Lefeuvre
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
