[Secure-testing-commits] r31715 - data/CVE

2015-01-26 Thread Salvatore Bonaccorso
Author: carnil Date: 2015-01-27 05:28:22 + (Tue, 27 Jan 2015) New Revision: 31715 Modified: data/CVE/list Log: Add fixed version for CVE-2014-9447/elfutils, #775536 Modified: data/CVE/list === --- data/CVE/list 2015-01-2

[Secure-testing-commits] r31714 - data/CVE

2015-01-26 Thread Salvatore Bonaccorso
Author: carnil Date: 2015-01-27 05:27:32 + (Tue, 27 Jan 2015) New Revision: 31714 Modified: data/CVE/list Log: Add fixed version for CVE-2014-8132/libssh, #773577 Modified: data/CVE/list === --- data/CVE/list 2015-01-26

[Secure-testing-commits] r31713 - data/CVE

2015-01-26 Thread Moritz Muehlenhoff
Author: jmm Date: 2015-01-26 23:45:34 + (Mon, 26 Jan 2015) New Revision: 31713 Modified: data/CVE/list Log: remove no-dsa entry, since it can be fixed along with other tiff changes Modified: data/CVE/list === --- data/CVE/lis

[Secure-testing-commits] r31712 - data/CVE

2015-01-26 Thread Moritz Muehlenhoff
Author: jmm Date: 2015-01-26 23:36:05 + (Mon, 26 Jan 2015) New Revision: 31712 Modified: data/CVE/list Log: bogus privoxy "issue" Modified: data/CVE/list === --- data/CVE/list 2015-01-26 23:23:06 UTC (rev 31711) +++ dat

[Secure-testing-commits] r31711 - data/CVE

2015-01-26 Thread Moritz Muehlenhoff
Author: jmm Date: 2015-01-26 23:23:06 + (Mon, 26 Jan 2015) New Revision: 31711 Modified: data/CVE/list Log: unshield no-dsa Modified: data/CVE/list === --- data/CVE/list 2015-01-26 23:15:53 UTC (rev 31710) +++ data/CVE/

[Secure-testing-commits] r31710 - data/CVE

2015-01-26 Thread Moritz Muehlenhoff
Author: jmm Date: 2015-01-26 23:15:53 + (Mon, 26 Jan 2015) New Revision: 31710 Modified: data/CVE/list Log: new ffmpeg/libav issues spotted by chromium people Modified: data/CVE/list === --- data/CVE/list 2015-01-26 23

[Secure-testing-commits] r31709 - data/CVE

2015-01-26 Thread Moritz Muehlenhoff
Author: jmm Date: 2015-01-26 23:00:27 + (Mon, 26 Jan 2015) New Revision: 31709 Modified: data/CVE/list Log: add some libv8 issues for recent chromium issues Modified: data/CVE/list === --- data/CVE/list 2015-01-26 22:52

[Secure-testing-commits] r31708 - data/CVE

2015-01-26 Thread Moritz Muehlenhoff
Author: jmm Date: 2015-01-26 22:52:17 + (Mon, 26 Jan 2015) New Revision: 31708 Modified: data/CVE/list Log: kdeworkspace no-dsa / NFU Modified: data/CVE/list === --- data/CVE/list 2015-01-26 21:21:39 UTC (rev 31707) +++

[Secure-testing-commits] r31707 - data/CVE

2015-01-26 Thread Raphaël Hertzog
Author: hertzog Date: 2015-01-26 21:21:39 + (Mon, 26 Jan 2015) New Revision: 31707 Modified: data/CVE/list Log: Mark freecad on squeeze as not affected by http://freecadweb.org/tracker/view.php?id=1785 Modified: data/CVE/list ===

[Secure-testing-commits] r31706 - data/CVE

2015-01-26 Thread Salvatore Bonaccorso
Author: carnil Date: 2015-01-26 21:15:49 + (Mon, 26 Jan 2015) New Revision: 31706 Modified: data/CVE/list Log: Add reference to upstream patch for CVE-2014-8132 Modified: data/CVE/list === --- data/CVE/list 2015-01-26 21

[Secure-testing-commits] r31705 - data/CVE

2015-01-26 Thread security tracker role
Author: sectracker Date: 2015-01-26 21:10:38 + (Mon, 26 Jan 2015) New Revision: 31705 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list === --- data/CVE/list 2015-01-26 21:06:48 UTC (rev 31704) +++ da

[Secure-testing-commits] r31703 - data/CVE

2015-01-26 Thread Raphaël Hertzog
Author: hertzog Date: 2015-01-26 21:06:41 + (Mon, 26 Jan 2015) New Revision: 31703 Modified: data/CVE/list Log: Mark ffmpeg as end-of-life on squeeze for CVE-2014-9597 and CVE-2014-9598 Modified: data/CVE/list === --- data/CVE

[Secure-testing-commits] r31704 - data/CVE

2015-01-26 Thread Raphaël Hertzog
Author: hertzog Date: 2015-01-26 21:06:48 + (Mon, 26 Jan 2015) New Revision: 31704 Modified: data/CVE/list Log: Mark file as not-affected on squeeze for http://bugs.gw.com/view.php?id=398 My reading of the code didn't find any possible out of bound access and this has been confirmed by run

[Secure-testing-commits] r31702 - data/CVE

2015-01-26 Thread Salvatore Bonaccorso
Author: carnil Date: 2015-01-26 20:21:52 + (Mon, 26 Jan 2015) New Revision: 31702 Modified: data/CVE/list Log: Add reference for xen bug, #776319 Modified: data/CVE/list === --- data/CVE/list 2015-01-26 18:05:05 UTC (rev

[Secure-testing-commits] r31701 - data/CVE

2015-01-26 Thread Moritz Muehlenhoff
Author: jmm Date: 2015-01-26 18:05:05 + (Mon, 26 Jan 2015) New Revision: 31701 Modified: data/CVE/list Log: openjdk n/a Modified: data/CVE/list === --- data/CVE/list 2015-01-26 18:02:19 UTC (rev 31700) +++ data/CVE/list

[Secure-testing-commits] r31700 - data/CVE

2015-01-26 Thread Moritz Muehlenhoff
Author: jmm Date: 2015-01-26 18:02:19 + (Mon, 26 Jan 2015) New Revision: 31700 Modified: data/CVE/list Log: openjdk-8 fixed Modified: data/CVE/list === --- data/CVE/list 2015-01-26 17:51:45 UTC (rev 31699) +++ data/CVE/

[Secure-testing-commits] r31699 - data/CVE

2015-01-26 Thread Salvatore Bonaccorso
Author: carnil Date: 2015-01-26 17:51:45 + (Mon, 26 Jan 2015) New Revision: 31699 Modified: data/CVE/list Log: CVE-2015-0391 already fixed in mariadb-10.0 in previous release (10.0.13) Modified: data/CVE/list === --- data/CVE/

[Secure-testing-commits] r31698 - data/CVE

2015-01-26 Thread Salvatore Bonaccorso
Author: carnil Date: 2015-01-26 17:51:35 + (Mon, 26 Jan 2015) New Revision: 31698 Modified: data/CVE/list Log: For two mysql CVEs not clear if mariadb-10.0 affected Modified: data/CVE/list === --- data/CVE/list 2015-01-2

[Secure-testing-commits] r31697 - data/CVE

2015-01-26 Thread Salvatore Bonaccorso
Author: carnil Date: 2015-01-26 17:45:02 + (Mon, 26 Jan 2015) New Revision: 31697 Modified: data/CVE/list Log: First round of "traige" for mariadb-10.0 issues Modified: data/CVE/list === --- data/CVE/list 2015-01-26 17:1

[Secure-testing-commits] r31696 - data/CVE

2015-01-26 Thread Moritz Muehlenhoff
Author: jmm Date: 2015-01-26 17:16:02 + (Mon, 26 Jan 2015) New Revision: 31696 Modified: data/CVE/list Log: openjdk6 fixed Modified: data/CVE/list === --- data/CVE/list 2015-01-26 17:13:45 UTC (rev 31695) +++ data/CVE/l

[Secure-testing-commits] r31695 - data/CVE

2015-01-26 Thread Moritz Muehlenhoff
Author: jmm Date: 2015-01-26 17:13:45 + (Mon, 26 Jan 2015) New Revision: 31695 Modified: data/CVE/list Log: vbox fixed Modified: data/CVE/list === --- data/CVE/list 2015-01-26 17:11:10 UTC (rev 31694) +++ data/CVE/list

[Secure-testing-commits] r31694 - data/CVE

2015-01-26 Thread Moritz Muehlenhoff
Author: jmm Date: 2015-01-26 17:11:10 + (Mon, 26 Jan 2015) New Revision: 31694 Modified: data/CVE/list Log: vlc issues disputed Modified: data/CVE/list === --- data/CVE/list 2015-01-26 13:24:18 UTC (rev 31693) +++ data/

[Secure-testing-commits] r31693 - data/CVE

2015-01-26 Thread Moritz Muehlenhoff
Author: jmm Date: 2015-01-26 13:24:18 + (Mon, 26 Jan 2015) New Revision: 31693 Modified: data/CVE/list Log: pillow bug Modified: data/CVE/list === --- data/CVE/list 2015-01-26 13:12:38 UTC (rev 31692) +++ data/CVE/list

[Secure-testing-commits] r31692 - data/CVE

2015-01-26 Thread Moritz Muehlenhoff
Author: jmm Date: 2015-01-26 13:12:38 + (Mon, 26 Jan 2015) New Revision: 31692 Modified: data/CVE/list Log: pax no-dsa json-glib unimportant Modified: data/CVE/list === --- data/CVE/list 2015-01-26 12:29:50 UTC (rev 316

[Secure-testing-commits] r31691 - data/CVE

2015-01-26 Thread Moritz Muehlenhoff
Author: jmm Date: 2015-01-26 12:29:50 + (Mon, 26 Jan 2015) New Revision: 31691 Modified: data/CVE/list Log: mark open node-* issues as unimportant Modified: data/CVE/list === --- data/CVE/list 2015-01-26 12:08:03 UTC (r

[Secure-testing-commits] r31690 - data/CVE

2015-01-26 Thread Moritz Muehlenhoff
Author: jmm Date: 2015-01-26 12:08:03 + (Mon, 26 Jan 2015) New Revision: 31690 Modified: data/CVE/list Log: vorbis-tools no-dsa Modified: data/CVE/list === --- data/CVE/list 2015-01-26 11:53:32 UTC (rev 31689) +++ data/

[Secure-testing-commits] r31689 - data/CVE

2015-01-26 Thread Moritz Muehlenhoff
Author: jmm Date: 2015-01-26 11:53:32 + (Mon, 26 Jan 2015) New Revision: 31689 Modified: data/CVE/list Log: gtk3 already fixed Modified: data/CVE/list === --- data/CVE/list 2015-01-26 11:30:28 UTC (rev 31688) +++ data/C

[Secure-testing-commits] r31688 - data

2015-01-26 Thread Holger Levsen
Author: holger Date: 2015-01-26 11:30:28 + (Mon, 26 Jan 2015) New Revision: 31688 Modified: data/dla-needed.txt Log: take rpm Modified: data/dla-needed.txt === --- data/dla-needed.txt 2015-01-26 11:30:27 UTC (rev 31687) +++ da

[Secure-testing-commits] r31687 - data

2015-01-26 Thread Holger Levsen
Author: holger Date: 2015-01-26 11:30:27 + (Mon, 26 Jan 2015) New Revision: 31687 Modified: data/dla-needed.txt Log: remove git from dla-needed as it's as its a minor issue Modified: data/dla-needed.txt === --- data/dla-neede

[Secure-testing-commits] r31686 - data/CVE

2015-01-26 Thread Raphaël Hertzog
Author: hertzog Date: 2015-01-26 11:06:25 + (Mon, 26 Jan 2015) New Revision: 31686 Modified: data/CVE/list Log: Mark djvulibre issue as no-dsa on squeeze too Modified: data/CVE/list === --- data/CVE/list 2015-01-26 11:06

[Secure-testing-commits] r31685 - data

2015-01-26 Thread Raphaël Hertzog
Author: hertzog Date: 2015-01-26 11:06:17 + (Mon, 26 Jan 2015) New Revision: 31685 Modified: data/dla-needed.txt Log: Add cpio to dla-needed Modified: data/dla-needed.txt === --- data/dla-needed.txt 2015-01-26 10:33:25 UTC (re

[Secure-testing-commits] r31684 - data/CVE

2015-01-26 Thread Salvatore Bonaccorso
Author: carnil Date: 2015-01-26 10:33:25 + (Mon, 26 Jan 2015) New Revision: 31684 Modified: data/CVE/list Log: Add note that CVE-2012-3878 will possibly be rejected, wait for status Modified: data/CVE/list === --- data/CVE/lis

[Secure-testing-commits] r31683 - in data: . DLA

2015-01-26 Thread Raphaël Hertzog
Author: hertzog Date: 2015-01-26 10:25:57 + (Mon, 26 Jan 2015) New Revision: 31683 Modified: data/DLA/list data/dla-needed.txt Log: Take DLA-137-1 for libevent Modified: data/DLA/list === --- data/DLA/list 2015-01-26

[Secure-testing-commits] r31682 - data/CVE

2015-01-26 Thread Salvatore Bonaccorso
Author: carnil Date: 2015-01-26 09:23:06 + (Mon, 26 Jan 2015) New Revision: 31682 Modified: data/CVE/list Log: Add reference for CVE-2012-3878/perl Modified: data/CVE/list === --- data/CVE/list 2015-01-26 09:10:17 UTC (r

[Secure-testing-commits] r31681 - data/CVE

2015-01-26 Thread security tracker role
Author: sectracker Date: 2015-01-26 09:10:17 + (Mon, 26 Jan 2015) New Revision: 31681 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list === --- data/CVE/list 2015-01-26 08:22:56 UTC (rev 31680) +++ da

[Secure-testing-commits] r31680 - data/CVE

2015-01-26 Thread Salvatore Bonaccorso
Author: carnil Date: 2015-01-26 08:22:56 + (Mon, 26 Jan 2015) New Revision: 31680 Modified: data/CVE/list Log: Bug is reported for CVE-2014-8242/librsync, #776246 Modified: data/CVE/list === --- data/CVE/list 2015-01-26