[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Remove no-dsa tagged entry for CVE-2017-3738, will be included in DSA

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ddcb9ca8 by Salvatore Bonaccorso at 2018-03-28T06:41:15+02:00 Remove no-dsa tagged entry for CVE-2017-3738, will be included in DSA - - - - - 1 changed file: - data/CVE/list Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Mark CVE-2018-0739/openssl1.0 fixed via unstable

+ - openssl1.0 1.0.2o-1 NOTE: https://www.openssl.org/news/secadv/20180327.txt NOTE: OpenSSL_1_1_0-stable: https://git.openssl.org/?p=openssl.git;a=commit;h=2ac4c6f7b2b2af20c0e2b0ba05367e454cd11b33 NOTE: OpenSSL_1_0_2-stable: https://git.openssl.org/?p=openssl.git

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Mark openssl fixes via unstable

- openssl1.0 NOTE: https://www.openssl.org/news/secadv/20180327.txt NOTE: OpenSSL_1_1_0-stable: https://git.openssl.org/?p=openssl.git;a=commit;h=2ac4c6f7b2b2af20c0e2b0ba05367e454cd11b33 @@ -65248,7 +65248,7 @@ CVE-2017-3739 REJECTED CVE-2017-3738

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2018-8754/libevt

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 46b01210 by Salvatore Bonaccorso at 2018-03-28T06:27:06+02:00 Add fixed version for CVE-2018-8754/libevt - - - - - 1 changed file: - data/CVE/list Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Claim drupal in dla-needed.txt

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 95c522c7 by Markus Koschany at 2018-03-28T00:25:14+02:00 Claim drupal in dla-needed.txt - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Reserve DLA-1321-1 for firefox-esr

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 4509 by Emilio Pozuelo Monfort at 2018-03-27T23:48:32+02:00 Reserve DLA-1321-1 for firefox-esr - - - - - 1 changed file: - data/DLA/list Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] CVE-2018-9018, graphicsmagick: Link to patch.

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 8bce1369 by Markus Koschany at 2018-03-27T23:45:24+02:00 CVE-2018-9018,graphicsmagick: Link to patch. - - - - - 1 changed file: - data/CVE/list Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add bug reference for drupal7 issue

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5c63656a by Salvatore Bonaccorso at 2018-03-27T22:54:56+02:00 Add bug reference for drupal7 issue - - - - - 1 changed file: - data/CVE/list Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add temporary item for drupal7

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 220fc141 by Salvatore Bonaccorso at 2018-03-27T22:51:59+02:00 Add temporary item for drupal7 - - - - - 1 changed file: - data/CVE/list Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add drupal7 to dsa-needed list

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 57e3b07b by Salvatore Bonaccorso at 2018-03-27T22:50:56+02:00 Add drupal7 to dsa-needed list - - - - - 1 changed file: - data/dsa-needed.txt Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] nm no-dsa

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 04168784 by Moritz Muehlenhoff at 2018-03-27T22:40:15+02:00 nm no-dsa imagemagick no-dsa jasper unimportant - - - - - 1 changed file: - data/CVE/list Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] ldap-account-manager issues fixed in unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 67b306f6 by Salvatore Bonaccorso at 2018-03-27T22:34:55+02:00 ldap-account-manager issues fixed in unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6922d3ee by Salvatore Bonaccorso at 2018-03-27T22:28:40+02:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] 2 commits: firefox DSA

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 989c7170 by Moritz Muehlenhoff at 2018-03-27T22:05:59+02:00 firefox DSA - - - - - 951a734f by Moritz Muehlenhoff at 2018-03-27T22:18:41+02:00 Merge branch master of

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f0a62418 by security tracker role at 2018-03-27T20:10:30+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] 2 commits: DSA-4152-1 mupdf

Luciano Bello pushed to branch master at Debian Security Tracker / security-tracker Commits: ee9a7dc8 by Luciano Bello at 2018-03-27T13:37:41-04:00 DSA-4152-1 mupdf - - - - - 0bb94c73 by Luciano Bello at 2018-03-27T15:48:38-04:00 Merge branch master of

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Update information for CVE-2018-1091/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 850ad4a1 by Salvatore Bonaccorso at 2018-03-27T21:26:35+02:00 Update information for CVE-2018-1091/linux Issue got fixed for 4.9-upstream-stable in 4.9.53 and the fix is included in the 4.9.65-1

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-1091/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9ad51749 by Salvatore Bonaccorso at 2018-03-27T21:22:33+02:00 Add CVE-2018-1091/linux - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] CVE-2018-7489/jackson-databind fixed in unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6d6820e5 by Salvatore Bonaccorso at 2018-03-27T21:12:19+02:00 CVE-2018-7489/jackson-databind fixed in unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add entry for DSA-4152-1/mupdf

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d5994b00 by Salvatore Bonaccorso at 2018-03-27T21:10:44+02:00 Add entry for DSA-4152-1/mupdf - - - - - 1 changed file: - data/DSA/list Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] fix typo

Holger Levsen pushed to branch master at Debian Security Tracker / security-tracker Commits: 0fe4b43d by Holger Levsen at 2018-03-27T18:57:43+00:00 fix typo Signed-off-by: Holger Levsen hol...@layer-acht.org - - - - - 1 changed file: - data/DLA/list Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Reserve DLA-1320-1 for samba

Holger Levsen pushed to branch master at Debian Security Tracker / security-tracker Commits: 2d420f82 by Holger Levsen at 2018-03-27T18:55:44+00:00 Reserve DLA-1320-1 for samba - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add temporary short descriptions

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: cb584dbb by Salvatore Bonaccorso at 2018-03-27T19:15:48+02:00 Add temporary short descriptions - - - - - 1 changed file: - data/CVE/list Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] add references to upstream fixes

/list = --- a/data/CVE/list +++ b/data/CVE/list @@ -22896,6 +22896,8 @@ CVE-2018-0739 - openssl - openssl1.0 NOTE: https://www.openssl.org/news/secadv/20180327.txt + NOTE: OpenSSL_1_1_0-stable: https://git.openssl.org/?p

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] new openssl issues

= --- a/data/CVE/list +++ b/data/CVE/list @@ -22893,6 +22893,9 @@ CVE-2018-0740 RESERVED CVE-2018-0739 RESERVED + - openssl + - openssl1.0 + NOTE: https://www.openssl.org/news/secadv/20180327.txt CVE-2018-0738 RESERVED CVE

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2017-18250/imagemagick

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f970b6fd by Salvatore Bonaccorso at 2018-03-27T13:02:24+02:00 Add CVE-2017-18250/imagemagick - - - - - 1 changed file: - data/CVE/list Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2017-18251/imagemagick

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ccef0980 by Salvatore Bonaccorso at 2018-03-27T12:58:22+02:00 Add CVE-2017-18251/imagemagick - - - - - 1 changed file: - data/CVE/list Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2017-18252/imagemagick

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 15b33cdc by Salvatore Bonaccorso at 2018-03-27T12:54:34+02:00 Add CVE-2017-18252/imagemagick - - - - - 1 changed file: - data/CVE/list Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Take net-snmp from dsa-needed list

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 59fa4134 by Salvatore Bonaccorso at 2018-03-27T12:52:34+02:00 Take net-snmp from dsa-needed list - - - - - 1 changed file: - data/dsa-needed.txt Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2017-18253/imagemagick

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 903c370a by Salvatore Bonaccorso at 2018-03-27T12:51:18+02:00 Add CVE-2017-18253/imagemagick - - - - - 1 changed file: - data/CVE/list Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2017-18254/imagemagick

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c919fe79 by Salvatore Bonaccorso at 2018-03-27T12:39:24+02:00 Add CVE-2017-18254/imagemagick Mark as unimportant as it only consist of a memory leak following other classifications itself. - -

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-9055/jasper

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 342c49d1 by Salvatore Bonaccorso at 2018-03-27T10:21:30+02:00 Add CVE-2018-9055/jasper - - - - - 1 changed file: - data/CVE/list Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4e25178f by Salvatore Bonaccorso at 2018-03-27T10:19:10+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: cd1b40e8 by security tracker role at 2018-03-27T08:10:12+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-1092/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6a6c8fad by Salvatore Bonaccorso at 2018-03-27T08:34:17+02:00 Add CVE-2018-1092/linux - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-1093/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 179d2e42 by Salvatore Bonaccorso at 2018-03-27T08:32:38+02:00 Add CVE-2018-1093/linux - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-1094/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4d24fb84 by Salvatore Bonaccorso at 2018-03-27T08:15:17+02:00 Add CVE-2018-1094/linux - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-1095/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8e768b75 by Salvatore Bonaccorso at 2018-03-27T08:11:20+02:00 Add CVE-2018-1095/linux - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] CVE-2018-5148 fixed for firefox and firefox-esr

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1b022f37 by Salvatore Bonaccorso at 2018-03-27T08:07:07+02:00 CVE-2018-5148 fixed for firefox and firefox-esr - - - - - 1 changed file: - data/CVE/list Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] firefox-esr needs DSA

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b1731665 by Salvatore Bonaccorso at 2018-03-27T08:03:15+02:00 firefox-esr needs DSA - - - - - 1 changed file: - data/dsa-needed.txt Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add new firefox issue

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1a2ec459 by Salvatore Bonaccorso at 2018-03-27T08:02:44+02:00 Add new firefox issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2017-18249/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c5f2aeb1 by Salvatore Bonaccorso at 2018-03-27T08:01:50+02:00 Add CVE-2017-18249/linux - - - - - 1 changed file: - data/CVE/list Changes: =