[Git][security-tracker-team/security-tracker][master] Add CVE-2018-20834/node-tar

2019-04-30 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 63b70322 by Salvatore Bonaccorso at 2019-04-30T20:58:36Z Add CVE-2018-20834/node-tar - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-20835/node-tar-fs

2019-04-30 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 79252283 by Salvatore Bonaccorso at 2019-04-30T20:58:01Z Add CVE-2018-20835/node-tar-fs - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] 2 commits: Process NFUs

2019-04-30 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8403353a by Salvatore Bonaccorso at 2019-04-30T20:47:19Z Process NFUs - - - - - 5d980900 by Salvatore Bonaccorso at 2019-04-30T20:57:23Z Process some NFUs - - - - - 1 changed file: -

[Git][security-tracker-team/security-tracker][master] Mark CVE-2019-10131/imagemagick as no-dsa for stretch

2019-04-30 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ad63451c by Salvatore Bonaccorso at 2019-04-30T20:43:53Z Mark CVE-2019-10131/imagemagick as no-dsa for stretch - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2019-10131/imagemagick

2019-04-30 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6647cd11 by Salvatore Bonaccorso at 2019-04-30T20:40:38Z Add CVE-2019-10131/imagemagick - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] automatic update

2019-04-30 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 27f6e7cb by security tracker role at 2019-04-30T20:10:28Z automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Mark CVE-2019-021{3,4} as NFUs

2019-04-30 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: efd6d5de by Salvatore Bonaccorso at 2019-04-30T19:49:36Z Mark CVE-2019-021{3,4} as NFUs - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] CVE-2019-1149{4,9}/dovecot fixed in unstable upload

2019-04-30 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 052dee8e by Salvatore Bonaccorso at 2019-04-30T19:42:26Z CVE-2019-1149{4,9}/dovecot fixed in unstable upload - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Claim otrs2 in dla-needed.txt

2019-04-30 Thread Markus Koschany
Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: b8748759 by Markus Koschany at 2019-04-30T19:32:43Z Claim otrs2 in dla-needed.txt - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Add temporary entry for gpg-key2ps shell injection vulnerability

2019-04-30 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 96773e37 by Salvatore Bonaccorso at 2019-04-30T19:09:10Z Add temporary entry for gpg-key2ps shell injection vulnerability - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] pacemaker CVEs: reference pull requests as whole

2019-04-30 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3482beb9 by Salvatore Bonaccorso at 2019-04-30T19:03:31Z pacemaker CVEs: reference pull requests as whole The pull requests are for the master (1749) and for the 1.1 branches of pacemaker

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-1149{4,9}/dovecot

2019-04-30 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 087e5279 by Salvatore Bonaccorso at 2019-04-30T14:05:09Z Add Debian bug reference for CVE-2019-1149{4,9}/dovecot - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] 2 commits: Add CVE-2019-11499/dovecot

2019-04-30 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d062c535 by Salvatore Bonaccorso at 2019-04-30T13:54:50Z Add CVE-2019-11499/dovecot - - - - - 7330dcde by Salvatore Bonaccorso at 2019-04-30T13:55:09Z Add CVE-2019-11494/dovecot - - - - - 1

[Git][security-tracker-team/security-tracker][master] golang-golang-x-net-dev, golang-github-seccomp-libseccomp-golang fixed

2019-04-30 Thread Moritz Muehlenhoff
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 35a0c324 by Moritz Muehlenhoff at 2019-04-30T11:50:28Z golang-golang-x-net-dev, golang-github-seccomp-libseccomp-golang fixed - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Mark CVE-2019-10124 as invalid

2019-04-30 Thread Ben Hutchings
Ben Hutchings pushed to branch master at Debian Security Tracker / security-tracker Commits: 3d6c3c50 by Ben Hutchings at 2019-04-30T11:16:28Z Mark CVE-2019-10124 as invalid - - - - - 2 changed files: - data/CVE/list - data/DLA/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add additional reference for CVE-2019-11599/linux

2019-04-30 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 90501725 by Salvatore Bonaccorso at 2019-04-30T08:34:06Z Add additional reference for CVE-2019-11599/linux - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] CVE-2019-3892 was rejected in favour of CVE-2019-11599

2019-04-30 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e238848d by Salvatore Bonaccorso at 2019-04-30T08:32:56Z CVE-2019-3892 was rejected in favour of CVE-2019-11599 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] NFU

2019-04-30 Thread Henri Salo
Henri Salo pushed to branch master at Debian Security Tracker / security-tracker Commits: fa0979bf by Henri Salo at 2019-04-30T08:20:07Z NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list = @@

[Git][security-tracker-team/security-tracker][master] automatic update

2019-04-30 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8db283e2 by security tracker role at 2019-04-30T08:10:13Z automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Reserve DLA-1772-1 for libvirt

2019-04-30 Thread Brian May
Brian May pushed to branch master at Debian Security Tracker / security-tracker Commits: 1d62c713 by Brian May at 2019-04-30T07:47:03Z Reserve DLA-1772-1 for libvirt - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] dla-needed: reclaim faad2 and hdf5

2019-04-30 Thread Hugo Lefeuvre
-needed.txt = @@ -27,8 +27,8 @@ drupal7 -- evolution-ews -- -faad2 - NOTE: 20190412: both patches for CVE-2018-20362 and CVE-2018-20194 merged by upstream. +faad2 (Hugo Lefeuvre) + NOTE: 20190430: both patches for CVE-2018-20362 and CVE-2018-20194 merged