[Git][security-tracker-team/security-tracker][master] Update severity for CVE-2019-1292{8,9}qemu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 91dafb27 by Salvatore Bonaccorso at 2019-07-02T20:14:28Z Update severity for CVE-2019-1292{8,9}qemu As mentioned in the notes already, this is basically a non-issue or with very negligible

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 249c08dd by security tracker role at 2019-07-02T20:10:29Z automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process two NFUs (Spacewalk)

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: aeae6a77 by Salvatore Bonaccorso at 2019-07-02T20:04:47Z Process two NFUs (Spacewalk) - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-12164/qemu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2b85b5aa by Salvatore Bonaccorso at 2019-07-02T20:00:06Z Add Debian bug reference for CVE-2019-12164/qemu - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2019-12164/qemu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2bd0e966 by Salvatore Bonaccorso at 2019-07-02T19:42:27Z Add CVE-2019-12164/qemu - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Track upload of fence-agents for stretch-pu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 164f0ac5 by Salvatore Bonaccorso at 2019-07-02T19:36:21Z Track upload of fence-agents for stretch-pu - - - - - 1 changed file: - data/next-point-update.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add fixed version for two libpng1.6 issues after upload to unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 03edc637 by Salvatore Bonaccorso at 2019-07-02T19:31:02Z Add fixed version for two libpng1.6 issues after upload to unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Reference POC for CVE-2019-12594/dosbox

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 32ec1821 by Salvatore Bonaccorso at 2019-07-02T19:26:14Z Reference POC for CVE-2019-12594/dosbox - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c4de1e36 by Salvatore Bonaccorso at 2019-07-02T15:18:58Z Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2019-13135/imagemagick

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c3d19438 by Salvatore Bonaccorso at 2019-07-02T15:12:18Z Add CVE-2019-13135/imagemagick - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2019-13136/imagemagick

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 61bd466d by Salvatore Bonaccorso at 2019-07-02T15:09:26Z Add CVE-2019-13136/imagemagick - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-13147/audiofile

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2d32e83d by Salvatore Bonaccorso at 2019-07-02T15:03:47Z Add Debian bug reference for CVE-2019-13147/audiofile - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-13137/imagemagick

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1f0f6d86 by Salvatore Bonaccorso at 2019-07-02T14:55:02Z Add Debian bug reference for CVE-2019-13137/imagemagick - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Clarify status for CVE-2019-9929/cfengine3 as confirmed to upstream

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 612bf97c by Salvatore Bonaccorso at 2019-07-02T13:20:41Z Clarify status for CVE-2019-9929/cfengine3 as confirmed to upstream The CVE-2019-9929 issue is very specific to leaking CFE_ROBOT user

[Git][security-tracker-team/security-tracker][master] xpdf triage

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 696c4a8d by Moritz Muehlenhoff at 2019-07-02T11:12:03Z xpdf triage NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] new exiv issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 81a13aa6 by Moritz Muehlenhoff at 2019-07-02T10:08:13Z new exiv issues NFUs new tor browser issue - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] CVE-2019-13147/audiofile: jessie triage

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker Commits: 19bf6bd9 by Sylvain Beucler at 2019-07-02T09:54:24Z CVE-2019-13147/audiofile: jessie triage - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] dla: add squirrelmail

: 20190702: no patch available, upstream apparently inactive, + NOTE: 20190702: reporter just recommends disabling HTML viewing of messages + NOTE: 20190702: we've got squirrelmail and squirrelmail-viewashtml users + NOTE: 20190702: so either write a patch or force disabling HTML? +-- tomcat8

[Git][security-tracker-team/security-tracker][master] 3 commits: lts-cve-triage: display lts' nodsa sub-state

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker Commits: 2437a255 by Sylvain Beucler at 2019-07-02T09:12:08Z lts-cve-triage: display lts nodsa sub-state - - - - - b8b0b9b3 by Sylvain Beucler at 2019-07-02T09:12:08Z lts-cve-triage: hint that color output

[Git][security-tracker-team/security-tracker][master] new audiofile, imagemagick issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: c876fd2d by Moritz Muehlenhoff at 2019-07-02T08:39:23Z new audiofile, imagemagick issues - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] lts-cve-triage: use jessie's (not wheezy's) unsupported packages list

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker Commits: 9e8c494a by Sylvain Beucler at 2019-07-02T08:22:31Z lts-cve-triage: use jessies (not wheezys) unsupported packages list - - - - - 1 changed file: - bin/lts-cve-triage.py Changes:

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8714f726 by security tracker role at 2019-07-02T08:10:13Z automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list