[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] automatic update

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: bb94a5da by security tracker role at 2018-04-12T08:10:15+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list ==

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Process NFUs

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 27759e77 by Salvatore Bonaccorso at 2018-04-12T11:02:01+02:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list ===

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] One tomcat issue Windows-specific

2018-04-12 Thread Moritz Muehlenhoff
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 7aeed9b6 by Moritz Muehlenhoff at 2018-04-12T14:10:55+02:00 One tomcat issue Windows-specific - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Fix syntax error for CVE-2017-12617 entry

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d21cbd57 by Salvatore Bonaccorso at 2018-04-12T14:21:36+02:00 Fix syntax error for CVE-2017-12617 entry - - - - - 1 changed file: - data/CVE/list Changes: ==

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] NFUs

2018-04-12 Thread Moritz Muehlenhoff
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: b41b5cab by Moritz Muehlenhoff at 2018-04-12T14:43:23+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list ===

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] NFUs

2018-04-12 Thread Moritz Muehlenhoff
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 07c0ce1b by Moritz Muehlenhoff at 2018-04-12T14:52:07+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list ===

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] NFUs

2018-04-12 Thread Moritz Muehlenhoff
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 3d0a2323 by Moritz Muehlenhoff at 2018-04-12T15:18:33+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list ===

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Reserve DSA for poppler update

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 400c8ebf by Salvatore Bonaccorso at 2018-04-12T15:24:04+02:00 Reserve DSA for poppler update - - - - - 1 changed file: - data/DSA/list Changes: = data/DS

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add note for firebird2.5 re. mailing list thread.

2018-04-12 Thread Chris Lamb
: = data/dla-needed.txt = --- a/data/dla-needed.txt +++ b/data/dla-needed.txt @@ -26,6 +26,7 @@ elinks -- firebird2.5 NOTE: 20180411: no fix available upstream for CVE-2017-11509 + NOTE: 20180412: see (lamby) -- gcc-4.6 (Roberto C. Sánchez) NOTE: 20180215

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Take tomcat8 from dsa-needed

2018-04-12 Thread Sebastien Delafond
Sebastien Delafond pushed to branch master at Debian Security Tracker / security-tracker Commits: 2f6178d1 by Sébastien Delafond at 2018-04-12T16:57:14+02:00 Take tomcat8 from dsa-needed - - - - - 1 changed file: - data/dsa-needed.txt Changes: = data/ds

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Lucas Kanashiro proposed update for redmine (stretch)

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b3f0644b by Salvatore Bonaccorso at 2018-04-12T20:16:55+02:00 Lucas Kanashiro proposed update for redmine (stretch) - - - - - 1 changed file: - data/dsa-needed.txt Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add three new cacti CVEs

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 816700f8 by Salvatore Bonaccorso at 2018-04-12T20:27:55+02:00 Add three new cacti CVEs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-1000168/nghttp2

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c324ddb9 by Salvatore Bonaccorso at 2018-04-12T20:34:03+02:00 Add CVE-2018-1000168/nghttp2 - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] 2 commits: qemu fixed

2018-04-12 Thread Moritz Muehlenhoff
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 182726ab by Moritz Muehlenhoff at 2018-04-12T20:34:57+02:00 qemu fixed - - - - - 165ad983 by Moritz Muehlenhoff at 2018-04-12T20:35:28+02:00 Merge branch 'master' of salsa.debian.org:security-trac

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] NFU

2018-04-12 Thread Moritz Muehlenhoff
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 4dea2153 by Moritz Muehlenhoff at 2018-04-12T20:38:17+02:00 NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Reference fix for CVE-2018-1000168

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 90ff32f8 by Salvatore Bonaccorso at 2018-04-12T20:39:47+02:00 Reference fix for CVE-2018-1000168 - - - - - 1 changed file: - data/CVE/list Changes: = dat

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-1084/corosync

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d912e1ab by Salvatore Bonaccorso at 2018-04-12T20:45:46+02:00 Add CVE-2018-1084/corosync - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/li

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add bug reference for CVE-2018-1000168/nghttp2: #895566

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7a5713bb by Salvatore Bonaccorso at 2018-04-12T20:46:41+02:00 Add bug reference for CVE-2018-1000168/nghttp2: #895566 - - - - - 1 changed file: - data/CVE/list Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] new r-cran-readxl issues

2018-04-12 Thread Moritz Muehlenhoff
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 064fef0c by Moritz Muehlenhoff at 2018-04-12T20:50:40+02:00 new r-cran-readxl issues - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list ===

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Mark some questionable Apple CVE assignments as NFU

2018-04-12 Thread Moritz Muehlenhoff
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: ae688ea7 by Moritz Muehlenhoff at 2018-04-12T20:52:58+02:00 Mark some questionable Apple CVE assignments as NFU No point in investigating this further, we can only assume that Apple staff is stupi

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-10074/linux

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2fd95337 by Salvatore Bonaccorso at 2018-04-12T20:57:08+02:00 Add CVE-2018-10074/linux - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Follow jessie.

2018-04-12 Thread Ola Lundqvist
Ola Lundqvist pushed to branch master at Debian Security Tracker / security-tracker Commits: 20dbc9cb by Ola Lundqvist at 2018-04-12T21:47:06+02:00 Follow jessie. - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list ===

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] The CVE was marked as no-dsa for Debian Security and there is no reason to…

2018-04-12 Thread Ola Lundqvist
Ola Lundqvist pushed to branch master at Debian Security Tracker / security-tracker Commits: b1c3111a by Ola Lundqvist at 2018-04-12T21:51:42+02:00 The CVE was marked as no-dsa for Debian Security and there is no reason to believe why wheezy should be treated differently. Therefore marking as i

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] The CVE was marked as no-dsa for Debian Security and there is no reason to…

2018-04-12 Thread Ola Lundqvist
available upstream for CVE-2017-11509 NOTE: 20180412: see (lamby) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ecc3fcae4e8db5ac6caa4a700cde97ab7ae23569 --- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] automatic update

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9960e818 by security tracker role at 2018-04-12T20:10:18+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list ==

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add tracking bug for CVE-2017-11592

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: dc2ef989 by Salvatore Bonaccorso at 2018-04-12T22:29:31+02:00 Add tracking bug for CVE-2017-11592 - - - - - 1 changed file: - data/CVE/list Changes: = da

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Process NFUs

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 14ba3986 by Salvatore Bonaccorso at 2018-04-12T22:36:10+02:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list ===

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add source package information for CVE-2018-383{7, 8, 9}

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5fe3fd83 by Salvatore Bonaccorso at 2018-04-12T22:47:00+02:00 Add source package information for CVE-2018-383{7,8,9} - - - - - 1 changed file: - data/CVE/list Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Reference fixing commits for CVE-2018-383{7, 8, 9}

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7356315e by Salvatore Bonaccorso at 2018-04-12T22:55:13+02:00 Reference fixing commits for CVE-2018-383{7,8,9} - - - - - 1 changed file: - data/CVE/list Changes: ===

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] CVE-2018-383{7, 8, 9} already fixed in unstable via libsdl2-image/2.0.3+dfsg1-1

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 08b75e88 by Salvatore Bonaccorso at 2018-04-12T22:58:07+02:00 CVE-2018-383{7,8,9} already fixed in unstable via libsdl2-image/2.0.3+dfsg1-1 - - - - - 1 changed file: - data/CVE/list Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Record fixed version for sdl-image1.2 issues via unstable

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5380d2f4 by Salvatore Bonaccorso at 2018-04-12T23:00:16+02:00 Record fixed version for sdl-image1.2 issues via unstable - - - - - 1 changed file: - data/CVE/list Changes: ==

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Record CVE-2018-383{7, 8, 9} which were already fixed with the sdl-image1.2/1.2.12-2+deb7u2 upload

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 740dd325 by Salvatore Bonaccorso at 2018-04-12T23:04:02+02:00 Record CVE-2018-383{7,8,9} which were already fixed with the sdl-image1.2/1.2.12-2+deb7u2 upload - - - - - 2 changed files: - dat

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Remove todo for CVE-2018-383{7, 8, 9}

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 987bb9e5 by Salvatore Bonaccorso at 2018-04-12T23:10:09+02:00 Remove todo for CVE-2018-383{7,8,9} - - - - - 1 changed file: - data/CVE/list Changes: = da

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add fixed version for r-cran-readxl issues

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1939d1fb by Salvatore Bonaccorso at 2018-04-13T05:05:04+02:00 Add fixed version for r-cran-readxl issues - - - - - 1 changed file: - data/CVE/list Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Two CVEs for pcs fixed in unstable upload via new upstream version

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: bf073759 by Salvatore Bonaccorso at 2018-04-13T05:08:57+02:00 Two CVEs for pcs fixed in unstable upload via new upstream version - - - - - 1 changed file: - data/CVE/list Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Reference fix for CVE-2018-7456/tiff

2018-04-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5b3b9881 by Salvatore Bonaccorso at 2018-04-13T05:16:27+02:00 Reference fix for CVE-2018-7456/tiff - - - - - 1 changed file: - data/CVE/list Changes: = d

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add and take corosync in dsa-needed

2018-04-12 Thread Sebastien Delafond
Sebastien Delafond pushed to branch master at Debian Security Tracker / security-tracker Commits: cdc3c011 by Sébastien Delafond at 2018-04-13T05:59:51+02:00 Add and take corosync in dsa-needed - - - - - 1 changed file: - data/dsa-needed.txt Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Take redmine in dsa-needed

2018-04-12 Thread Sebastien Delafond
Sebastien Delafond pushed to branch master at Debian Security Tracker / security-tracker Commits: 9aee0333 by Sébastien Delafond at 2018-04-13T06:23:59+02:00 Take redmine in dsa-needed - - - - - 1 changed file: - data/dsa-needed.txt Changes: = data/dsa-