[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: add tigervnc and claim it

Mike Gabriel pushed to branch master at Debian Security Tracker / security-tracker Commits: 381fe102 by Mike Gabriel at 2019-12-26T22:44:19Z data/dla-needed.txt: add tigervnc and claim it - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Add information on CVE-2019-19882

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e8f8ff2a by Salvatore Bonaccorso at 2019-12-26T22:19:03Z Add information on CVE-2019-19882 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-16789/waitress

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4b87c62c by Salvatore Bonaccorso at 2019-12-26T21:34:40Z Add Debian bug reference for CVE-2019-16789/waitress - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2019-7621/kibana

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 08b69602 by Salvatore Bonaccorso at 2019-12-26T21:33:36Z Add CVE-2019-7621/kibana - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process more NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 30f75ae0 by Salvatore Bonaccorso at 2019-12-26T21:32:57Z Process more NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] 3 commits: Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: fcf0e0d7 by Salvatore Bonaccorso at 2019-12-26T21:16:34Z Process some NFUs - - - - - e2f879c1 by Salvatore Bonaccorso at 2019-12-26T21:16:57Z Add CVE-2019-16789/waitress - - - - - dbdba091 by

[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2019-19952,imagemagick: Jessie is not affected.

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 40aac991 by Markus Koschany at 2019-12-26T21:14:32Z CVE-2019-19952,imagemagick: Jessie is not affected. Instead of freeing mng_info, in Jessie an exception is thrown. - - - - - 13d399b4 by Markus

[Git][security-tracker-team/security-tracker][master] Add CVE-2019-5108/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f4934e12 by Salvatore Bonaccorso at 2019-12-26T20:59:55Z Add CVE-2019-5108/linux - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Splitup temporary entry for Wordpress into two assigned CVEs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8f24f42c by Salvatore Bonaccorso at 2019-12-26T20:53:09Z Splitup temporary entry for Wordpress into two assigned CVEs - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2018-1311/xerces-c

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2514eacb by Salvatore Bonaccorso at 2019-12-26T20:46:54Z Add Debian bug reference for CVE-2018-1311/xerces-c - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2019-16785,CVE-2019-16786,waitress: Mark as no-dsa for Jessie

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 358db1fc by Markus Koschany at 2019-12-26T20:45:14Z CVE-2019-16785,CVE-2019-16786,waitress: Mark as no-dsa for Jessie Minor issue - - - - - 12eab616 by Markus Koschany at 2019-12-26T20:45:14Z

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-1569{1,2,3,4,5}/tigervnc

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 831fad91 by Salvatore Bonaccorso at 2019-12-26T20:42:07Z Add Debian bug reference for CVE-2019-1569{1,2,3,4,5}/tigervnc - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-1311/xerces-c

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4090d1b7 by Salvatore Bonaccorso at 2019-12-26T20:35:40Z Add CVE-2018-1311/xerces-c - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 43102f71 by Salvatore Bonaccorso at 2019-12-26T20:32:21Z Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process some NFUs for theme(s) for WordPress

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e97ec056 by Salvatore Bonaccorso at 2019-12-26T20:21:25Z Process some NFUs for theme(s) for WordPress - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2019-1569{1,2,3,4,5}/tigervnc

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6183e432 by Salvatore Bonaccorso at 2019-12-26T20:18:17Z Add CVE-2019-1569{1,2,3,4,5}/tigervnc Note that the CVEs are specifically for TigerVNC. - - - - - 1 changed file: - data/CVE/list

[Git][security-tracker-team/security-tracker][master] Group source and NOTEs for CVE-2019-12422

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d26859f8 by Salvatore Bonaccorso at 2019-12-26T20:11:52Z Group source and NOTEs for CVE-2019-12422 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7075a74d by security tracker role at 2019-12-26T20:10:25Z automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] CVE-2019-12422,shiro: Mark as no-dsa for Jessie.

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: c834d957 by Markus Koschany at 2019-12-26T20:07:10Z CVE-2019-12422,shiro: Mark as no-dsa for Jessie. Minor issue. - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] 2 commits: Reference advisory for CVE-2019-13611/python-engineio

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 789860f1 by Salvatore Bonaccorso at 2019-12-26T19:56:51Z Reference advisory for CVE-2019-13611/python-engineio - - - - - cfb0e797 by Salvatore Bonaccorso at 2019-12-26T19:57:46Z Add fixed

[Git][security-tracker-team/security-tracker][master] CVE-2019-12422,shiro: Link to fixing commit

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: bba0f7cf by Markus Koschany at 2019-12-26T18:59:06Z CVE-2019-12422,shiro: Link to fixing commit - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] mediawiki DSA

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: acd0f141 by Moritz Muehlenhoff at 2019-12-26T18:24:21Z mediawiki DSA - - - - - 2 changed files: - data/DSA/list - data/dsa-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] libyang fixed

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: ed4c3f6e by Moritz Muehlenhoff at 2019-12-26T18:00:21Z libyang fixed - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] CVE-2019-19232,CVE-2019-19234,sudo: Mark as no-dsa for Jessie.

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 9fe07501 by Markus Koschany at 2019-12-26T17:42:21Z CVE-2019-19232,CVE-2019-19234,sudo: Mark as no-dsa for Jessie. Minor issue because attacker must have access to a Runas ALL account already. - -

[Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-19906/cyrus-sasl2 via unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 49fc6cb1 by Salvatore Bonaccorso at 2019-12-26T16:22:49Z Add fixed version for CVE-2019-19906/cyrus-sasl2 via unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-19794/golang-github-miekg-dns

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 942ada37 by Salvatore Bonaccorso at 2019-12-26T13:25:45Z Add Debian bug reference for CVE-2019-19794/golang-github-miekg-dns - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Fix inconsistent leading ident before if statement

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 716bf276 by Brian May at 2019-12-26T13:21:01Z Fix inconsistent leading ident before if statement - - - - - 1 changed file: - lib/python/security_db.py Changes:

[Git][security-tracker-team/security-tracker][master] Track upstream commit for CVE-2019-19794/golang-github-miekg-dns

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 92ed7c25 by Salvatore Bonaccorso at 2019-12-26T13:11:18Z Track upstream commit for CVE-2019-19794/golang-github-miekg-dns - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] 3 commits: Reference upstream commit for CVE-2019-19647/radare2

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0b3acc7b by Salvatore Bonaccorso at 2019-12-26T12:44:36Z Reference upstream commit for CVE-2019-19647/radare2 - - - - - a9b94d42 by Salvatore Bonaccorso at 2019-12-26T12:45:04Z Mark

[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6b383ca7 by Salvatore Bonaccorso at 2019-12-26T08:18:46Z Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 924b5d17 by security tracker role at 2019-12-26T08:10:15Z automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list