[Git][security-tracker-team/security-tracker][master] Update CVE-2020-24370/lua5.3 notes

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: 37c958bb by Roberto C. Sánchez at 2020-09-25T22:21:34-04:00 Update CVE-2020-24370/lua5.3 notes - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Mark CVE-2020-24371/lua5.3 as

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: 029b8925 by Roberto C. Sánchez at 2020-09-25T22:11:49-04:00 Mark CVE-2020-24371/lua5.3 as not-affected This applies for both buster and stretch (same upstream release in both). The upstream bug

[Git][security-tracker-team/security-tracker][master] fix typo

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: 8caaa13f by Roberto C. Sánchez at 2020-09-25T21:49:22-04:00 fix typo - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] LTS: claim lua5.3

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: d5031a7a by Roberto C. Sánchez at 2020-09-25T21:36:02-04:00 LTS: claim lua5.3 - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Reserve DLA-2379-1 for mediawiki

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: 25bac2aa by Roberto C. Sánchez at 2020-09-25T21:05:56-04:00 Reserve DLA-2379-1 for mediawiki - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] LTS: mark CVE-2020-2581{2,5}/mediawiki as for stretch

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: 2eca1517 by Roberto C. Sánchez at 2020-09-25T20:45:24-04:00 LTS: mark CVE-2020-2581{2,5}/mediawiki as not-affected for stretch - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] 3 commits: dla: unclaim brotli

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 108d79b5 by Emilio Pozuelo Monfort at 2020-09-26T00:33:25+02:00 dla: unclaim brotli - - - - - 171ccc95 by Emilio Pozuelo Monfort at 2020-09-26T00:36:43+02:00 dla: update firefox-esr status

[Git][security-tracker-team/security-tracker][master] LTS: claim mediawiki

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: 348978bf by Roberto C. Sánchez at 2020-09-25T17:51:54-04:00 LTS: claim mediawiki - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Reserve DLA-2378-1 for openssl1.0

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: b30e0825 by Roberto C. Sánchez at 2020-09-25T17:36:12-04:00 Reserve DLA-2378-1 for openssl1.0 - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Sort entries by source package

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b4d4d12b by Salvatore Bonaccorso at 2020-09-25T23:15:57+02:00 Sort entries by source package - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] LTS: remove openssl from dla-needed.txt, no open issues

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: eaae6e9f by Roberto C. Sánchez at 2020-09-25T17:13:26-04:00 LTS: remove openssl from dla-needed.txt, no open issues - - - - - 1 changed file: - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] LTS: mark CVE-2020-1968/openssl as for stretch

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: 6a7d4e4b by Roberto C. Sánchez at 2020-09-25T17:12:46-04:00 LTS: mark CVE-2020-1968/openssl as not-affected for stretch - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-6070/f2fs-tools

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0c2cb818 by Salvatore Bonaccorso at 2020-09-25T22:58:36+02:00 Add Debian bug reference for CVE-2020-6070/f2fs-tools - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] LTS: update status of squid3

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: 8379b341 by Roberto C. Sánchez at 2020-09-25T16:48:07-04:00 LTS: update status of squid3 - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-25743/qemu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 268a8c8b by Salvatore Bonaccorso at 2020-09-25T22:40:28+02:00 Add Debian bug reference for CVE-2020-25743/qemu - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-25741/qemu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 002dbcee by Salvatore Bonaccorso at 2020-09-25T22:35:25+02:00 Add Debian bug reference for CVE-2020-25741/qemu - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process several NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 16a643da by Salvatore Bonaccorso at 2020-09-25T22:21:58+02:00 Process several NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-17380/qemu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 04681101 by Salvatore Bonaccorso at 2020-09-25T22:12:25+02:00 Add Debian bug reference for CVE-2020-17380/qemu - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 99e70731 by security tracker role at 2020-09-25T20:10:23+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-25739/ruby-gon

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c41a20f3 by Salvatore Bonaccorso at 2020-09-25T22:27:45+02:00 Add Debian bug reference for CVE-2020-25739/ruby-gon - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d4658636 by Salvatore Bonaccorso at 2020-09-25T22:14:32+02:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] CVE-2020-17380/qemu: Add reference to upstream patch discussion

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5014dc81 by Salvatore Bonaccorso at 2020-09-25T21:59:08+02:00 CVE-2020-17380/qemu: Add reference to upstream patch discussion - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] LTS: claim openssl and openssl1.0

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: 7b9fffc5 by Roberto C. Sánchez at 2020-09-25T15:47:05-04:00 LTS: claim openssl and openssl1.0 - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2016-11086/ruby-oauth

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 079ad8d9 by Salvatore Bonaccorso at 2020-09-25T21:38:23+02:00 Add Debian bug reference for CVE-2016-11086/ruby-oauth - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] 2 commits: Remove note on already fully rejected CVE

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c885282f by Salvatore Bonaccorso at 2020-09-25T21:07:47+02:00 Remove note on already fully rejected CVE As the later mentioned CVE was fully rejected at MITRE level already we should not

[Git][security-tracker-team/security-tracker][master] mediawiki DSA

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: ea7fcf1b by Moritz Muehlenhoff at 2020-09-25T19:39:38+02:00 mediawiki DSA - - - - - 3 changed files: - data/CVE/list - data/DSA/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] update NOTE of CVE-2018-19211 and mark it as ignored in Stretch

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: b63449c1 by Thorsten Alteholz at 2020-09-25T17:25:51+02:00 update NOTE of CVE-2018-19211 and mark it as ignored in Stretch - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] 4 commits: add packagekit

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: 519b7188 by Thorsten Alteholz at 2020-09-25T15:39:51+02:00 add packagekit - - - - - 36eb9928 by Thorsten Alteholz at 2020-09-25T15:45:32+02:00 add mediawiki - - - - - 3d54538e by Thorsten

[Git][security-tracker-team/security-tracker][master] libmatio fixed in experimental

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 0479c89c by Moritz Muehlenhoff at 2020-09-25T12:55:42+02:00 libmatio fixed in experimental - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] take mediawiki

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 818e92d5 by Moritz Muehlenhoff at 2020-09-25T11:29:03+02:00 take mediawiki - - - - - 1 changed file: - data/dsa-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] new iotjs issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 297ff01e by Moritz Muehlenhoff at 2020-09-25T11:27:58+02:00 new iotjs issue pagure n/a NFUs - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2020-10936/sympa via unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: efb7dcb8 by Salvatore Bonaccorso at 2020-09-25T10:44:04+02:00 Add fixed version for CVE-2020-10936/sympa via unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process several NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 45100e16 by Salvatore Bonaccorso at 2020-09-25T10:28:55+02:00 Process several NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Track one more CVE for buster-pu for linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5c17477b by Salvatore Bonaccorso at 2020-09-25T10:24:27+02:00 Track one more CVE for buster-pu for linux - - - - - 1 changed file: - data/next-point-update.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add fixed version via unstable for CVE-2020-25641/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e33affec by Salvatore Bonaccorso at 2020-09-25T10:21:21+02:00 Add fixed version via unstable for CVE-2020-25641/linux - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2016-11086/ruby-ouath

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8105788b by Salvatore Bonaccorso at 2020-09-25T10:18:32+02:00 Add CVE-2016-11086/ruby-ouath - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] 2 commits: Shorten slightly commit references for linus' git tree

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 33031bac by Salvatore Bonaccorso at 2020-09-25T10:12:34+02:00 Shorten slightly commit references for linus git tree - - - - - f5a22e5f by Salvatore Bonaccorso at 2020-09-25T10:13:28+02:00

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 193c7192 by security tracker role at 2020-09-25T08:10:19+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Don't associate CVE-2020-25689 with MediaWiki

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 902f751c by Moritz Muehlenhoff at 2020-09-25T09:29:57+02:00 Dont associate CVE-2020-25689 with MediaWiki - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] new linux issue, new wildfly issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: ed088146 by Moritz Muehlenhoff at 2020-09-25T09:18:12+02:00 new linux issue, new wildfly issue - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] wireshark n/a or postponed

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 5bf97e3d by Moritz Muehlenhoff at 2020-09-25T09:15:21+02:00 wireshark n/a or postponed - - - - - 1 changed file: - data/CVE/list Changes: =