[Git][security-tracker-team/security-tracker][master] CVE-2020-6851/openjpeg2: add upstream fix

2020-01-23 Thread Hugo Lefeuvre
Hugo Lefeuvre pushed to branch master at Debian Security Tracker / security-tracker Commits: 06748838 by Hugo Lefeuvre at 2020-01-24T08:48:39+01:00 CVE-2020-6851/openjpeg2: add upstream fix - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE

[Git][security-tracker-team/security-tracker][master] CVE-2020-7106/cacti: add followup patch

2020-01-23 Thread Hugo Lefeuvre
Hugo Lefeuvre pushed to branch master at Debian Security Tracker / security-tracker Commits: bfb2cc04 by Hugo Lefeuvre at 2020-01-24T08:34:55+01:00 CVE-2020-7106/cacti: add followup patch - - - - - 2 changed files: - data/CVE/list - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] more bugs for stb code copies

2020-01-23 Thread Moritz Muehlenhoff
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 3e36a8e6 by Moritz Muehlenhoff at 2020-01-23T23:22:38+01:00 more bugs for stb code copies - - - - - 1 changed file: - data/embedded-code-copies Changes:

[Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-9278/libexif via unstable

2020-01-23 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4f5cf03b by Salvatore Bonaccorso at 2020-01-23T23:01:01+01:00 Add fixed version for CVE-2019-9278/libexif via unstable - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] python-apt DSA

2020-01-23 Thread Moritz Muehlenhoff
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: e059a63c by Moritz Muehlenhoff at 2020-01-23T22:59:14+01:00 python-apt DSA - - - - - 1 changed file: - data/DSA/list Changes: = data/DSA/list ===

[Git][security-tracker-team/security-tracker][master] LTS/claim samba in dla-needed.txt

2020-01-23 Thread Roberto C . Sánchez
Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: 371a07f2 by Roberto C. Sánchez at 2020-01-23T16:22:23-05:00 LTS/claim samba in dla-needed.txt - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Reserve DLA-2074-1 for python-apt

2020-01-23 Thread Dylan Aïssi
Dylan Aïssi pushed to branch master at Debian Security Tracker / security-tracker Commits: 479325f4 by Dylan Aïssi at 2020-01-23T21:52:53+01:00 Reserve DLA-2074-1 for python-apt - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes: ===

[Git][security-tracker-team/security-tracker][master] Add CVE-2014-2680/xmind

2020-01-23 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a4153c3c by Salvatore Bonaccorso at 2020-01-23T21:44:17+01:00 Add CVE-2014-2680/xmind - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/lis

[Git][security-tracker-team/security-tracker][master] Process NFUs

2020-01-23 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f3236774 by Salvatore Bonaccorso at 2020-01-23T21:42:44+01:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list =

[Git][security-tracker-team/security-tracker][master] Add CVE-2019-18222/mbedtls

2020-01-23 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9a610794 by Salvatore Bonaccorso at 2020-01-23T21:43:25+01:00 Add CVE-2019-18222/mbedtls - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for modsecurity issue

2020-01-23 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 36c2beb1 by Salvatore Bonaccorso at 2020-01-23T21:31:23+01:00 Add Debian bug reference for modsecurity issue - - - - - 1 changed file: - data/CVE/list Changes: ===

[Git][security-tracker-team/security-tracker][master] CVE-2010-3295 got REJECTED (not a security issue)

2020-01-23 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b6b27880 by Salvatore Bonaccorso at 2020-01-23T21:28:40+01:00 CVE-2010-3295 got REJECTED (not a security issue) - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] automatic update

2020-01-23 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c2a19ba2 by security tracker role at 2020-01-23T20:10:20+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] webkit2gtk upstream advisory WSA-2020-0001

2020-01-23 Thread Alberto Garcia
Alberto Garcia pushed to branch master at Debian Security Tracker / security-tracker Commits: c9327e57 by Alberto Garcia at 2020-01-23T18:40:06+01:00 webkit2gtk upstream advisory WSA-2020-0001 - - - - - 2 changed files: - data/CVE/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] 3 commits: Update PR link for CVE-2020-7105 in hiredis.

2020-01-23 Thread Chris Lamb
: 20200119: submitted patch upstream (lamby) - NOTE: 20200123: various alternative approaches being discussed uipstream (lamby) + NOTE: 20200123: various alternative approaches being discussed upstream (lamby) + NOTE: 20200123: new PR opened upstream (lamby) -- ibus NOTE: 20191210: Requires gli

[Git][security-tracker-team/security-tracker][master] 5 commits: mark CVE-2019-16792 as no-dsa for jessie

2020-01-23 Thread Thorsten Alteholz
-- +libsolv + NOTE: 20200123: Mike is maintainer +-- libxmlrpc3-java (Markus Koschany) -- linux (Ben Hutchings) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/84ace8306da15c48b009020db8a113f4287ff2d2...88a8362591be3b6dc178bc1dcf8766a89544b319 -- View it on

[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Update note for hiredis.

2020-01-23 Thread Chris Lamb
/dla-needed.txt = @@ -29,6 +29,7 @@ graphicsmagick (Thorsten Alteholz) hiredis (Chris Lamb) NOTE: 20200118: no upstream patches, yet, but should be easy to fix (sunweaver) NOTE: 20200119: submitted patch upstream (lamby) + NOTE: 20200123: various

[Git][security-tracker-team/security-tracker][master] Add new libyang issues

2020-01-23 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1e8af1d8 by Salvatore Bonaccorso at 2020-01-23T09:19:52+01:00 Add new libyang issues Those need further checking actually, this commit mainly associates the references for the CVEs to the sourc

[Git][security-tracker-team/security-tracker][master] Process NFUs

2020-01-23 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 69dcd6ce by Salvatore Bonaccorso at 2020-01-23T09:15:11+01:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list =

[Git][security-tracker-team/security-tracker][master] automatic update

2020-01-23 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6b2b6075 by security tracker role at 2020-01-23T08:10:34+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list