Skip to content
Commits on Source (2)
Hide whitespace changes
Inline Side-by-side
data/dla-needed.txt
View file @ 0d231c99
......@@ -11,15 +11,15 @@ https://wiki.debian.org/LTS/Development#Triage_new_security_issues
--
389-ds-base
NOTE: 20180716, there is no patch available for the remaining CVE
NOTE: 20180716: There is no patch available for the remaining CVE
--
ansible (Abhijith PA)
--
blender (Markus Koschany)
--
busybox (Markus Koschany)
NOTE: Update is ready and will be uploaded at the end of July when my updated
NOTE: GPG key has been pushed to the keyring.
NOTE: 20180714: Update is ready and will be uploaded at the end of July when my updated
NOTE: 20180714: GPG key has been pushed to the keyring.
--
clamav
NOTE: 20180720: wait for the stretch update and backport 0.100.1
......@@ -40,7 +40,7 @@ giflib
NOTE: 20180717: CVE-2018-11490 while triaging these issues.
--
git-annex
NOTE: See #903037 for more information and a fix for Stretch.
NOTE: 20180710: See #903037 for more information and a fix for Stretch.
--
graphicsmagick (Roberto C. Sánchez)
--
......@@ -72,25 +72,26 @@ libav (Hugo Lefeuvre)
libgit2 (Thorsten Alteholz)
--
libidn (Santiago)
NOTE: CVE-2017-14062 fixed in wheezy. 20180622: Markus reports that Santiago has proposed an update for this to the security team. (lamby)
NOTE: 20180622: Markus reports that Santiago has proposed an update for this to the security team. (lamby)
NOTE: 20180624: CVE-2017-14062 fixed in wheezy
--
libspring-java (Abhijith PA)
libspring-java(Abhijith PA)
--
libxml2
NOTE: 20180720: There are many open CVEs marked as <no-dsa> for jessie and stretch.
NOTE: 20180720: My (sunweaver) sense is that someone should go over them and fix those that are fixable.
NOTE: 20180720: My sense is that someone should go over them and fix those that are fixable.
--
linux (Ben Hutchings)
--
linux-4.9 (Ben Hutchings)
--
mosquitto
NOTE: 20180629: there are still two CVEs open, their upstream bugs show no progress
--
mutt (Roberto C. Sánchez)
--
mysql-5.5 (Emilio Pozuelo)
--
mosquitto
NOTE: 20180629: there are still two CVEs open, their upstream bugs show no progress
--
network-manager-vpnc (Mike Gabriel)
NOTE: 20180720: Should IMHO be bundled with
NOTE: 20180720: https://gitlab.gnome.org/GNOME/NetworkManager-vpnc/commit/796628f56ab616371156464f4973c8368b388337
......@@ -108,10 +109,10 @@ policykit-1 (Abhijith PA)
--
qemu (Santiago)
--
ruby2.1
--
ruby-zip
--
ruby2.1
--
sam2p
--
symfony
......@@ -133,18 +134,18 @@ twitter-bootstrap3
vim-syntastic (Thorsten Alteholz)
--
wine
NOTE: Consider either fixing wine-development too or marking it as
NOTE: end-of-life. The stable version is actually only src:wine and is used
NOTE: by sponsors. The other one is more experimental and contains the latest
NOTE: features.
NOTE: 20180711: Consider either fixing wine-development too or marking it as
NOTE: 20180711: end-of-life. The stable version is actually only src:wine and is used
NOTE: 20180711: by sponsors. The other one is more experimental and contains the latest
NOTE: 20180711: features.
--
wine-development
NOTE: See remarks for wine
NOTE: 20180711: See remarks for wine
--
wireshark (Thorsten Alteholz)
--
wordpress (Markus Koschany)
NOTE: Update is ready and will be released at the end of the month.
NOTE: 20180716: Update is ready and will be released at the end of the month.
--
xen (Emilio Pozuelo)
--