[Secure-testing-commits] r57095 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 22:30:55 + (Sat, 28 Oct 2017) New Revision: 57095 Modified: data/CVE/list Log: Update status for CVE-2017-15951/linux Modified: data/CVE/list === --- data/CVE/list 2017-10-28 21:10:12 UTC

[Secure-testing-commits] r57094 - data/CVE

2017-10-28 Thread security tracker role
Author: sectracker Date: 2017-10-28 21:10:12 + (Sat, 28 Oct 2017) New Revision: 57094 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list === --- data/CVE/list 2017-10-28 20:53:51 UTC (rev 57093) +++

[Secure-testing-commits] r57093 - data/CVE

2017-10-28 Thread Moritz Muehlenhoff
Author: jmm Date: 2017-10-28 20:53:51 + (Sat, 28 Oct 2017) New Revision: 57093 Modified: data/CVE/list Log: gm fixed Modified: data/CVE/list === --- data/CVE/list 2017-10-28 20:45:51 UTC (rev 57092) +++ data/CVE/list

[Secure-testing-commits] r57092 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 20:45:51 + (Sat, 28 Oct 2017) New Revision: 57092 Modified: data/CVE/list Log: Add two mariadb-10.0 entries Modified: data/CVE/list === --- data/CVE/list 2017-10-28 20:35:45 UTC (rev

[Secure-testing-commits] r57091 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 20:35:45 + (Sat, 28 Oct 2017) New Revision: 57091 Modified: data/CVE/list Log: Mark tomcat8.0 as unimportant, only subset is built to binary packages Modified: data/CVE/list === ---

[Secure-testing-commits] r57089 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 20:27:51 + (Sat, 28 Oct 2017) New Revision: 57089 Modified: data/CVE/list Log: Add fixing version for CVE-2017-12617/tomcat8 Modified: data/CVE/list === --- data/CVE/list 2017-10-28

[Secure-testing-commits] r57090 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 20:28:03 + (Sat, 28 Oct 2017) New Revision: 57090 Modified: data/CVE/list Log: Add new source entry for CVE-2017-12617/tomcat8.0 tomcat8.0 got packaged as well (unfortunately?). So we need to start tracking tomcat8.0 as well. The issue is fixed in 8.0.47

[Secure-testing-commits] r57087 - data

2017-10-28 Thread Thorsten Alteholz
Author: alteholz Date: 2017-10-28 17:18:57 + (Sat, 28 Oct 2017) New Revision: 57087 Modified: data/dla-needed.txt Log: add libextractor Modified: data/dla-needed.txt === --- data/dla-needed.txt 2017-10-28 17:11:35 UTC (rev

[Secure-testing-commits] r57086 - data

2017-10-28 Thread Thorsten Alteholz
Author: alteholz Date: 2017-10-28 17:11:35 + (Sat, 28 Oct 2017) New Revision: 57086 Modified: data/dla-needed.txt Log: add libxml2 Modified: data/dla-needed.txt === --- data/dla-needed.txt 2017-10-28 17:05:17 UTC (rev 57085)

[Secure-testing-commits] r57083 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 15:50:37 + (Sat, 28 Oct 2017) New Revision: 57083 Modified: data/CVE/list Log: Reported another bug for exiv2 in experimental Modified: data/CVE/list === --- data/CVE/list 2017-10-28

[Secure-testing-commits] r57081 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 15:40:27 + (Sat, 28 Oct 2017) New Revision: 57081 Modified: data/CVE/list Log: Mark systemd issue as no-dsa Modified: data/CVE/list === --- data/CVE/list 2017-10-28 15:40:16 UTC (rev

[Secure-testing-commits] r57080 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 15:40:16 + (Sat, 28 Oct 2017) New Revision: 57080 Modified: data/CVE/list Log: Add bug references for radare2 issues Modified: data/CVE/list === --- data/CVE/list 2017-10-28 15:33:43 UTC

[Secure-testing-commits] r57078 - data/CVE

2017-10-28 Thread Thorsten Alteholz
Author: alteholz Date: 2017-10-28 15:31:15 + (Sat, 28 Oct 2017) New Revision: 57078 Modified: data/CVE/list Log: follow security team with CVE-2017-15938 of binutils Modified: data/CVE/list === --- data/CVE/list

[Secure-testing-commits] r57077 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 15:18:12 + (Sat, 28 Oct 2017) New Revision: 57077 Modified: data/CVE/list Log: Update status for CVE-2017-15096/glusterfs Issue introduced starting in 3.10 release. Thus marking the previous releases as not-affected. Modified: data/CVE/list

[Secure-testing-commits] r57076 - data/CVE

2017-10-28 Thread Thorsten Alteholz
Author: alteholz Date: 2017-10-28 15:16:00 + (Sat, 28 Oct 2017) New Revision: 57076 Modified: data/CVE/list Log: wheezy and jessie are not affected by CVE-2017-15931 and CVE-2017-15932 Modified: data/CVE/list === ---

[Secure-testing-commits] r57075 - in data: . DSA

2017-10-28 Thread Moritz Muehlenhoff
Author: jmm Date: 2017-10-28 14:33:06 + (Sat, 28 Oct 2017) New Revision: 57075 Modified: data/DSA/list data/dsa-needed.txt Log: wget DSA Modified: data/DSA/list === --- data/DSA/list 2017-10-28 12:43:04 UTC (rev

[Secure-testing-commits] r57074 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 12:43:04 + (Sat, 28 Oct 2017) New Revision: 57074 Modified: data/CVE/list Log: Add bug for glusterfs issue Modified: data/CVE/list === --- data/CVE/list 2017-10-28 12:38:33 UTC (rev

[Secure-testing-commits] r57073 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 12:38:33 + (Sat, 28 Oct 2017) New Revision: 57073 Modified: data/CVE/list Log: Update information for CVE-2017-15096/glusterfs Modified: data/CVE/list === --- data/CVE/list 2017-10-28

[Secure-testing-commits] r57072 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 12:34:09 + (Sat, 28 Oct 2017) New Revision: 57072 Modified: data/CVE/list Log: Add bug for CVE-2017-15922/libextractor Modified: data/CVE/list === --- data/CVE/list 2017-10-28 12:33:58

[Secure-testing-commits] r57071 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 12:33:58 + (Sat, 28 Oct 2017) New Revision: 57071 Modified: data/CVE/list Log: Update information for CVE-2017-15908/systemd Modified: data/CVE/list === --- data/CVE/list 2017-10-28

[Secure-testing-commits] r57070 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 12:33:46 + (Sat, 28 Oct 2017) New Revision: 57070 Modified: data/CVE/list Log: Reference fix for CVE-2017-15922 Modified: data/CVE/list === --- data/CVE/list 2017-10-28 12:33:35 UTC (rev

[Secure-testing-commits] r57067 - data/CVE

2017-10-28 Thread Moritz Muehlenhoff
Author: jmm Date: 2017-10-28 12:26:21 + (Sat, 28 Oct 2017) New Revision: 57067 Modified: data/CVE/list Log: new chromium issue Modified: data/CVE/list === --- data/CVE/list 2017-10-28 12:22:22 UTC (rev 57066) +++

[Secure-testing-commits] r57065 - data/CVE

2017-10-28 Thread Moritz Muehlenhoff
Author: jmm Date: 2017-10-28 10:34:03 + (Sat, 28 Oct 2017) New Revision: 57065 Modified: data/CVE/list Log: openjdk-9 fixed Modified: data/CVE/list === --- data/CVE/list 2017-10-28 10:03:03 UTC (rev 57064) +++

[Secure-testing-commits] r57064 - data/CVE

2017-10-28 Thread Moritz Muehlenhoff
Author: jmm Date: 2017-10-28 10:03:03 + (Sat, 28 Oct 2017) New Revision: 57064 Modified: data/CVE/list Log: NFUs chromium n/a Modified: data/CVE/list === --- data/CVE/list 2017-10-28 10:00:01 UTC (rev 57063) +++

[Secure-testing-commits] r57063 - data/CVE

2017-10-28 Thread Moritz Muehlenhoff
Author: jmm Date: 2017-10-28 10:00:01 + (Sat, 28 Oct 2017) New Revision: 57063 Modified: data/CVE/list Log: new ruby-ox issue NFUs Modified: data/CVE/list === --- data/CVE/list 2017-10-28 09:57:13 UTC (rev 57062) +++

[Secure-testing-commits] r57062 - data/CVE

2017-10-28 Thread Moritz Muehlenhoff
Author: jmm Date: 2017-10-28 09:57:13 + (Sat, 28 Oct 2017) New Revision: 57062 Modified: data/CVE/list Log: add references Modified: data/CVE/list === --- data/CVE/list 2017-10-28 09:45:21 UTC (rev 57061) +++

[Secure-testing-commits] r57061 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 09:45:21 + (Sat, 28 Oct 2017) New Revision: 57061 Modified: data/CVE/list Log: Add two new radare2 issues Modified: data/CVE/list === --- data/CVE/list 2017-10-28 09:17:42 UTC (rev 57060)

[Secure-testing-commits] r57059 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 09:16:39 + (Sat, 28 Oct 2017) New Revision: 57059 Modified: data/CVE/list Log: Update CVE-2017-15939/binutils Modified: data/CVE/list === --- data/CVE/list 2017-10-28 09:11:46 UTC (rev

[Secure-testing-commits] r57058 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 09:11:46 + (Sat, 28 Oct 2017) New Revision: 57058 Modified: data/CVE/list Log: Add CVE-2017-15951/linux Modified: data/CVE/list === --- data/CVE/list 2017-10-28 09:10:54 UTC (rev 57057)

[Secure-testing-commits] r57057 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 09:10:54 + (Sat, 28 Oct 2017) New Revision: 57057 Modified: data/CVE/list Log: Adjust notes for inocmplete fixes notes Modified: data/CVE/list === --- data/CVE/list 2017-10-28 09:10:13

[Secure-testing-commits] r57056 - data/CVE

2017-10-28 Thread security tracker role
Author: sectracker Date: 2017-10-28 09:10:13 + (Sat, 28 Oct 2017) New Revision: 57056 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list === --- data/CVE/list 2017-10-28 09:01:55 UTC (rev 57055) +++

[Secure-testing-commits] r57055 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 09:01:55 + (Sat, 28 Oct 2017) New Revision: 57055 Modified: data/CVE/list Log: Update information for CVE-2016-15864/redis Modified: data/CVE/list === --- data/CVE/list 2017-10-28

[Secure-testing-commits] r57054 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 08:54:21 + (Sat, 28 Oct 2017) New Revision: 57054 Modified: data/CVE/list Log: Slightly reorganize notes with prefixes Modified: data/CVE/list === --- data/CVE/list 2017-10-28 08:51:46

[Secure-testing-commits] r57051 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 08:35:44 + (Sat, 28 Oct 2017) New Revision: 57051 Modified: data/CVE/list Log: Add some clarification to note for CVE-2017-11613 The note probably should be dropped completely as classification by Red Hat and Debian often diverge. We might mark it as

[Secure-testing-commits] r57048 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 08:05:23 + (Sat, 28 Oct 2017) New Revision: 57048 Modified: data/CVE/list Log: Add bug reference for libxml2 Modified: data/CVE/list === --- data/CVE/list 2017-10-28 08:00:32 UTC (rev

[Secure-testing-commits] r57045 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 07:35:01 + (Sat, 28 Oct 2017) New Revision: 57045 Modified: data/CVE/list Log: Mark fixed version for CVE-2017-15612/mistune in unstable Modified: data/CVE/list === --- data/CVE/list

[Secure-testing-commits] r57043 - data/CVE

2017-10-28 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-10-28 07:14:10 + (Sat, 28 Oct 2017) New Revision: 57043 Modified: data/CVE/list Log: Add CVE-2017-15930/graphicsmagick Modified: data/CVE/list === --- data/CVE/list 2017-10-27 21:22:40 UTC (rev