Antoine Beaupré pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8f2b56c5 by Antoine Beaupré at 2018-04-11T16:25:04-04:00
remove squirrelmail triaged as thijs reserved the DLA
- - - - -
69d165fd by Antoine Beaupré at 2018-04-11T16:27:20-04:00
Revert "triage libgcrypt out of lts"
This reverts commit 0e4f8bf1085ccfaf8f0ce2bc81e80a1d002aa4ba.
The source package was wrong and this is not necessary as it is
unimportant anyways
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -8288,7 +8288,6 @@ CVE-2018-6829 (cipher/elgamal.c in Libgcrypt through
1.8.2, when used to encrypt
- libgcrypt11 <removed> (unimportant)
- gnupg1 <unfixed> (unimportant)
- gnupg <removed> (unimportant)
- [wheezy] libgcrypt <no-dsa> (unimportant)
NOTE: https://github.com/weikengchen/attack-on-libgcrypt-elgamal
NOTE: https://github.com/weikengchen/attack-on-libgcrypt-elgamal/wiki
NOTE:
https://lists.gnupg.org/pipermail/gcrypt-devel/2018-February/004394.html
=====================================
data/dla-needed.txt
=====================================
--- a/data/dla-needed.txt
+++ b/data/dla-needed.txt
@@ -91,8 +91,6 @@ sharutils (Abhijith PA)
--
slurm-llnl (Thorsten Alteholz)
--
-squirrelmail
---
tiff (Hugo Lefeuvre)
NOTE: incomplete fix of CVE-2017-18013, see CVE-2018-7456.
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/0e4f8bf1085ccfaf8f0ce2bc81e80a1d002aa4ba...69d165fd7617935749844cde43dcfa395b002a2f
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/0e4f8bf1085ccfaf8f0ce2bc81e80a1d002aa4ba...69d165fd7617935749844cde43dcfa395b002a2f
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
