summaryrefslogtreecommitdiffstats
path: root/data/dla-needed.txt
diff options
context:
space:
mode:
authorHolger Levsen <holger@layer-acht.org>2020-01-27 11:34:02 +0100
committerHolger Levsen <holger@layer-acht.org>2020-01-27 11:34:02 +0100
commitc90145f036ef06ae73afebcea5407ed32c05a936 (patch)
tree34a179eb4bd052fcdd087ae22b600b21e2d416d9 /data/dla-needed.txt
parente9a584f956e5560d763a95ae15cb14e9b4edc292 (diff)
semi-automatic unclaim after 2 weeks of inactivity
Signed-off-by: Holger Levsen <holger@layer-acht.org>
Diffstat (limited to 'data/dla-needed.txt')
-rw-r--r--data/dla-needed.txt8
1 files changed, 4 insertions, 4 deletions
diff --git a/data/dla-needed.txt b/data/dla-needed.txt
index fa27fbff70..88d34fd9d3 100644
--- a/data/dla-needed.txt
+++ b/data/dla-needed.txt
@@ -12,7 +12,7 @@ https://wiki.debian.org/LTS/Development#Triage_new_security_issues
--
cacti (Chris Lamb)
--
-clamav (Hugo Lefeuvre)
+clamav
NOTE: 20200111: waiting for 0.102.1 to enter stretch/buster.
NOTE: 0.102.* introduces a fair amount of ABI changes, and the migration
NOTE: does not seem very smooth from the perspective of users. The release
@@ -39,7 +39,7 @@ iperf3 (Thorsten Alteholz)
jackson-databind
NOTE: 20200105: Can be postponed again. (apo)
--
-libexif (Hugo Lefeuvre)
+libexif
NOTE: 20191111: Contacted upstream for relevant commits of CVE-2019-9278. (utkarsh2102)
NOTE: 20191114: Pinged upstream; just have the Android patch yet. (utkarsh2102)
NOTE: 20191118: No patch yet. Shall claim and fix once the patch is available. (utkarsh2102)
@@ -84,7 +84,7 @@ openjpeg2 (Mike Gabriel)
--
python-pysaml2 (Abhijith PA)
--
-python-reportlab (Hugo Lefeuvre)
+python-reportlab
NOTE: 20200111: still no upstream fix
--
qemu (Utkarsh Gupta)
@@ -139,7 +139,7 @@ wordpress
NOTE: 20200118: Maybe affected, needs deeper triaging, no obvious commits
NOTE: 20200118: referenced upstream. (sunweaver)
--
-xcftools (Hugo Lefeuvre)
+xcftools
NOTE: 20200111: wrote a patch + reproducer for CVE-2019-5086, waiting for review.
NOTE: but I might just not receive any review any time soon, so I will now attempt to
NOTE: fix the second issue and move on with the update.

© 2014-2024 Faster IT GmbH | imprint | privacy policy