[Git][security-tracker-team/security-tracker][master] Add mantis issue

2021-03-07 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 49c06c7d by Salvatore Bonaccorso at 2021-03-08T08:52:07+01:00 Add mantis issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list =

[Git][security-tracker-team/security-tracker][master] Reserve DLA-2553-2 for xcftools

2021-03-07 Thread Markus Koschany
Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 8492d4f6 by Markus Koschany at 2021-03-08T08:37:47+01:00 Reserve DLA-2553-2 for xcftools - - - - - 1 changed file: - data/DLA/list Changes: = data/DLA/list

[Git][security-tracker-team/security-tracker][master] Update status of ansible in dla-needed.txt

2021-03-07 Thread Markus Koschany
Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 8ae8e7ab by Markus Koschany at 2021-03-08T08:35:53+01:00 Update status of ansible in dla-needed.txt - - - - - 1 changed file: - data/dla-needed.txt Changes: ===

[Git][security-tracker-team/security-tracker][master] Track fixed version in unstable for rust-http

2021-03-07 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2a1a28d3 by Salvatore Bonaccorso at 2021-03-08T08:05:19+01:00 Track fixed version in unstable for rust-http Still open if one of the two CVEs need to be rejected, request to MITRE pending yet.

[Git][security-tracker-team/security-tracker][master] Sync some linux CVEs with kernel-sec

2021-03-07 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 758a51cd by Salvatore Bonaccorso at 2021-03-08T05:30:55+01:00 Sync some linux CVEs with kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Update status for CVE-2020-12363 and CVE-2020-12364

2021-03-07 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 82d00b22 by Salvatore Bonaccorso at 2021-03-08T05:25:12+01:00 Update status for CVE-2020-12363 and CVE-2020-12364 After further research from Ben, those two specific CVEs are in driver only and

[Git][security-tracker-team/security-tracker][master] Reserve DLA-2586-1 for linux

2021-03-07 Thread Ben Hutchings
Ben Hutchings pushed to branch master at Debian Security Tracker / security-tracker Commits: e9750b53 by Ben Hutchings at 2021-03-08T01:04:06+01:00 Reserve DLA-2586-1 for linux - - - - - 1 changed file: - data/DLA/list Changes: = data/DLA/list ===

[Git][security-tracker-team/security-tracker][master] update notes

2021-03-07 Thread Thorsten Alteholz
: 20210218: If you have any idea why this is called the "skippy peanut butter" issue, I would be mildly interested. (lamby) @@ -56,7 +57,7 @@ golang-gogoprotobuf (Ola Lundqvist) gsoap -- libebml (Thorsten Alteholz) - NOTE: 20210221: testing package + NOTE: 20210307: testing package (not ye

[Git][security-tracker-team/security-tracker][master] Reserve DLA-2585-1 for libupnp

2021-03-07 Thread Utkarsh Gupta
Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker Commits: b35a3de3 by Utkarsh Gupta at 2021-03-08T03:15:39+05:30 Reserve DLA-2585-1 for libupnp - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes: ==

[Git][security-tracker-team/security-tracker][master] 3 commits: Mark CVE-2020-12695/libupnp as no-dsa; invasive changes

2021-03-07 Thread Utkarsh Gupta
Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker Commits: 02f66a6e by Utkarsh Gupta at 2021-03-08T02:14:02+05:30 Mark CVE-2020-12695/libupnp as no-dsa; invasive changes - - - - - 01f9665c by Utkarsh Gupta at 2021-03-08T02:14:31+05:30 Take libupnp - - - - -

[Git][security-tracker-team/security-tracker][master] stretch triage

2021-03-07 Thread Abhijith PA
Abhijith PA pushed to branch master at Debian Security Tracker / security-tracker Commits: a055a404 by Abhijith PA at 2021-03-08T01:41:45+05:30 stretch triage - - - - - 2 changed files: - data/CVE/list - data/dla-needed.txt Changes: = data/CVE/list ==

[Git][security-tracker-team/security-tracker][master] automatic update

2021-03-07 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: eb075bd1 by security tracker role at 2021-03-07T20:10:25+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2021-2627{1,2}/ckeditor

2021-03-07 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d6bf9d7d by Salvatore Bonaccorso at 2021-03-07T20:59:50+01:00 Track fixed version for CVE-2021-2627{1,2}/ckeditor - - - - - 1 changed file: - data/CVE/list Changes: ==

[Git][security-tracker-team/security-tracker][master] mark CVE-2020-28491 as no-dsa

2021-03-07 Thread Abhijith PA
Abhijith PA pushed to branch master at Debian Security Tracker / security-tracker Commits: 07f7c4e9 by Abhijith PA at 2021-03-08T00:54:23+05:30 mark CVE-2020-28491 as no-dsa - - - - - 2 changed files: - data/CVE/list - data/dla-needed.txt Changes: = d

[Git][security-tracker-team/security-tracker][master] Stretch triage

2021-03-07 Thread Abhijith PA
Abhijith PA pushed to branch master at Debian Security Tracker / security-tracker Commits: c220ce4b by Abhijith PA at 2021-03-07T20:27:05+05:30 Stretch triage - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list =

[Git][security-tracker-team/security-tracker][master] Update referencing of upstream commits for CVE-2021-2736{3,4,5}

2021-03-07 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2b09c8e3 by Salvatore Bonaccorso at 2021-03-07T09:36:10+01:00 Update referencing of upstream commits for CVE-2021-2736{3,4,5} Red Hat and SUSE did not cover the same set of commits, but were la

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-2066{3,4,5}/movabletype-opensource

2021-03-07 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a6947dc7 by Salvatore Bonaccorso at 2021-03-07T09:20:12+01:00 Add CVE-2021-2066{3,4,5}/movabletype-opensource - - - - - 1 changed file: - data/CVE/list Changes: ==

[Git][security-tracker-team/security-tracker][master] Process NFUs

2021-03-07 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 38bf60c7 by Salvatore Bonaccorso at 2021-03-07T09:19:35+01:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list =

[Git][security-tracker-team/security-tracker][master] automatic update

2021-03-07 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ca6e27e7 by security tracker role at 2021-03-07T08:10:20+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2019-25025/ruby-activerecord-session-store

2021-03-07 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1550e374 by Salvatore Bonaccorso at 2021-03-07T09:00:42+01:00 Add CVE-2019-25025/ruby-activerecord-session-store - - - - - 1 changed file: - data/CVE/list Changes: ===