From cb1cbaf87619be02e71c0723b820095aa38572ca Mon Sep 17 00:00:00 2001 From: Abhijith PA Date: Tue, 2 Mar 2021 21:55:35 +0530 Subject: Reserve DLA-2579-1 for spip --- data/DLA/list | 2 ++ data/dla-needed.txt | 4 ---- 2 files changed, 2 insertions(+), 4 deletions(-) diff --git a/data/DLA/list b/data/DLA/list index 19cade3857..1fc3ae5131 100644 --- a/data/DLA/list +++ b/data/DLA/list @@ -1,3 +1,5 @@ +[02 Mar 2021] DLA-2579-1 spip - security update + [stretch] - spip 3.1.4-4~deb9u4+deb9u1 [01 Mar 2021] DLA-2578-1 thunderbird - security update {CVE-2021-23968 CVE-2021-23969 CVE-2021-23973 CVE-2021-23978} [stretch] - thunderbird 1:78.8.0-1~deb9u1 diff --git a/data/dla-needed.txt b/data/dla-needed.txt index 98fb0908a2..1b9b2c928c 100644 --- a/data/dla-needed.txt +++ b/data/dla-needed.txt @@ -122,10 +122,6 @@ shiro NOTE: 20201004: Sent additional request to upstream dev list; stil no response. (roberto) NOTE: 20201220: Upstream has responded. Working with them to backport fixes. (roberto) -- -spip (Abhijith PA) - NOTE: 20210228: maintainer doesn't want to work on this update. (utkarsh) - NOTE: 20210228: a DSA is already out; check against the patch uploaded. (utkarsh) --- spotweb NOTE: 20201220: The affected code uses string concatenation to construct a SQL query. NOTE: 20201220: Upstream's "fix" is to blacklist all the "bad" SQL commands. (roberto) -- cgit v1.2.3