[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] unify error message generation: librelp and rsyslog

Luciano Bello pushed to branch master at Debian Security Tracker / security-tracker Commits: fbf74ec9 by Luciano Bello at 2018-03-22T21:12:54-04:00 unify error message generation: librelp and rsyslog - - - - - 1 changed file: - data/CVE/list Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] CVE-2018-1000069, freeplane: Link to patch

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 80713b31 by Markus Koschany at 2018-03-22T23:42:10+01:00 CVE-2018-169,freeplane: Link to patch - - - - - 1 changed file: - data/CVE/list Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 65727d38 by Moritz Muehlenhoff at 2018-03-22T23:14:55+01:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] kamailio, plexus-utils2 DSAs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 2e502dc8 by Moritz Muehlenhoff at 2018-03-22T23:05:06+01:00 kamailio, plexus-utils2 DSAs - - - - - 2 changed files: - data/DSA/list - data/dsa-needed.txt Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] exempi, obs no-dsa

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 456db781 by Moritz Muehlenhoff at 2018-03-22T23:02:42+01:00 exempi, obs no-dsa zsh undetermined - - - - - 1 changed file: - data/CVE/list Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Reserve DLA-1312-1 for libvorbisidec

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: 18f9f814 by Thorsten Alteholz at 2018-03-22T22:13:43+01:00 Reserve DLA-1312-1 for libvorbisidec - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7ea636f4 by security tracker role at 2018-03-22T21:10:20+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add bug reference for CVE-2018-8905/tiff

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0e37134d by Salvatore Bonaccorso at 2018-03-22T17:11:23+01:00 Add bug reference for CVE-2018-8905/tiff - - - - - 1 changed file: - data/CVE/list Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] 2 commits: Add CVE-2017-11333 for DSA-4113-1

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: eb901a44 by Salvatore Bonaccorso at 2018-03-22T16:55:15+01:00 Add CVE-2017-11333 for DSA-4113-1 - - - - - 1c89a1f7 by Salvatore Bonaccorso at 2018-03-22T16:55:56+01:00 Mark CVE-2017-11333

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Mark CVE-2017-11333 as fixed with libvorbis unstable upload

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 79078dda by Salvatore Bonaccorso at 2018-03-22T16:50:03+01:00 Mark CVE-2017-11333 as fixed with libvorbis unstable upload The commit used by upstream is to adress CVE-2017-16433, but it adresses

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Mark CVE-2017-1001001/pluxml as fixed via unstable upload

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 894fd08c by Salvatore Bonaccorso at 2018-03-22T16:43:28+01:00 Mark CVE-2017-1001001/pluxml as fixed via unstable upload Upstream has not yet properly fixed it, but the Debian package with the

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] 2 commits: Record proposed update for adminer for jessie-pu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4fe90aba by Salvatore Bonaccorso at 2018-03-22T16:31:57+01:00 Record proposed update for adminer for jessie-pu - - - - - dd558547 by Salvatore Bonaccorso at 2018-03-22T16:32:16+01:00 Record

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Process one NFU

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 51552d7f by Salvatore Bonaccorso at 2018-03-22T16:24:13+01:00 Process one NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] ruby-loofah fixed

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: b38f1bb2 by Moritz Muehlenhoff at 2018-03-22T16:19:21+01:00 ruby-loofah fixed - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] node-ssri fixed

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: c119732a by Moritz Muehlenhoff at 2018-03-22T16:18:29+01:00 node-ssri fixed - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] CVE-2018-8768: Lowercase source package name

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 97c3b7a1 by Salvatore Bonaccorso at 2018-03-22T16:09:26+01:00 CVE-2018-8768: Lowercase source package name - - - - - 1 changed file: - data/CVE/list Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] 2 commits: Add one more yii CVE

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 60d01741 by Salvatore Bonaccorso at 2018-03-22T16:08:12+01:00 Add one more yii CVE - - - - - 5d7cb9c7 by Salvatore Bonaccorso at 2018-03-22T16:08:13+01:00 Rename source package tracking from

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] gitlab fixed

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: c046169b by Moritz Muehlenhoff at 2018-03-22T16:03:27+01:00 gitlab fixed - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-807{3, 4}/yii, itp'ed: #597899

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 18abcf02 by Salvatore Bonaccorso at 2018-03-22T16:01:11+01:00 Add CVE-2018-807{3,4}/yii, itped: #597899 - - - - - 1 changed file: - data/CVE/list Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] CVE-2017-18241: Use shortcut URL (and as used for kernel-sec fixes trackings)

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e76ba3a3 by Salvatore Bonaccorso at 2018-03-22T15:59:08+01:00 CVE-2017-18241: Use shortcut URL (and as used for kernel-sec fixes trackings) - - - - - 1 changed file: - data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] claim mupdf

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: 10856248 by Thorsten Alteholz at 2018-03-22T15:50:40+01:00 claim mupdf - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] claim libvorbisidec

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: edc9d78b by Thorsten Alteholz at 2018-03-22T15:29:01+01:00 claim libvorbisidec - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] 2 commits: data/dla-needed.txt: Use YYYYMMDD, not YYYDDMM (!!)

in unstable (lamby) + NOTE: 20180316: No patch/upstream info for CVE-2018-7667 yet. (lamby) + NOTE: 20180319: Still no patch/upstream info for CVE-2018-7667. (lamby) + NOTE: 20180322: Packages ready to go, awaiting ACK from security team for non-LTS uploads; will do all at once (lamby) -- calibre

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: d96fa587 by Moritz Muehlenhoff at 2018-03-22T12:13:58+01:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] new linux issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 75ca6991 by Moritz Muehlenhoff at 2018-03-22T12:09:19+01:00 new linux issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] new tiff issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: f2ea6164 by Moritz Muehlenhoff at 2018-03-22T11:52:46+01:00 new tiff issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 26bcc4c1 by Moritz Muehlenhoff at 2018-03-22T11:43:05+01:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list