December 2019 Archives by date
Starting: Sun Dec 1 04:08:07 GMT 2019
Ending: Tue Dec 31 23:12:20 GMT 2019
Messages: 791
- [Git][security-tracker-team/security-tracker][master] Add note for libexif
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Claim some frontdesk weeks
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Remove no-dsa tagged entry which got an update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update information on CVE-2019-18813
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update information on CVE-2019-18812
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Update gnome-font-viewer and gnome-sushi; have written a...
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Add tracking for CVE-2019-13566 via buster-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-15961/clamav
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2017-2 for asterisk
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] Track proposed update for CVE-2019-13566/ros-ros-comm via stretch-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track proposed update for CVE-2019-14857/libapache2-mod-auth-openidc via buster-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track proposed update for CVE-2019-9656/libofx via stretch-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Remove listing of CVE-2019-1316 in DLA 2017-1 entry
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add upstream reference for CVE-2019-9278/libexif
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-9278/libexif
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-10768/angular.js fixed version in unstable
László Böszörményi
- [Git][security-tracker-team/security-tracker][master] dia unimportant
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Sync state of some linux CVEs with kernel-sec
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: dla: add and claim exiv2
Dylan Aïssi
- [Git][security-tracker-team/security-tracker][master] telnets no-dsa
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-14906 as NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: mark CVE-2019-6477 as not-affected for jessie
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-5163/shadowsocks-libev
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] add second shadowsocks CVE
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] 2 commits: Adjust upstream issue reference for TALOS-2019-0958 report
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19492/freeswitch (itp'ed)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-194{79,80,81}/opensc
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Patch for gnome-font-viewer and gnome-sushi accepted/landed upstream.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Add upstream commit reference for CVE-2019-19308
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity
Holger Levsen
- [Git][security-tracker-team/security-tracker][master] new librabbitmq issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] add ruby to dsa-needed
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage python-django for jessie
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim python-django.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Triage CVE-2019-0053 in inetutils, netkit-telnet and netkit-telnet-ssl for jessie.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19118/python-django
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Remove note referring only to the upstream Changelog.md
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add notes on mitigation for shadowsocks-libev issue
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] TALOS-2019-0958 report has CVE-2019-5164 assigned
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process one NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add bug for CVE-2019-19118 in python-django.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] 2 commits: Add information around introducing issue for CVE-2019-19118
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] stretch/buster triage
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2019-1 for exiv2
Dylan Aïssi
- [Git][security-tracker-team/security-tracker][master] 2 commits: LTS/add and claim opensc
Roberto C. Sánchez
- [Git][security-tracker-team/security-tracker][master] Annotate CVE-2019-19480/opensc as not affecting jessie
Roberto C. Sánchez
- [Git][security-tracker-team/security-tracker][master] Annotate CVE-2019-19481/opensc as not affecting jessie
Roberto C. Sánchez
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2019-17402/exiv2
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-17402/exiv2 as no-dsa
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Add information on CVE-2019-19481
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] new luajit issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Add and claim luajit
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Update information on CVE-2019-19480/opensc
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Expand slightly reasoning on the not-affected status for CVE-2019-19480
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug tracker reference for CVE-2019-19391/luajit
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track CVE fixes for linux upload via buster-pu (4.19.87-1)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update status of OpenJDK 7 in dla-needed.txt
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Add Debian bug tracking information for CVE-2019-3866/python-oslo.utils
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Triage python-oslo.utils for Jessie
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Add note for python-oslo.utils
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] CVE-2019-19203/libonig: jessie ignored
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] new firefox issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Android NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Adjust codename for CVE-2019-19203/libonig
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add myself for front desk assignment.
Ola Lundqvist
- [Git][security-tracker-team/security-tracker][master] Triage CVE-2019-19118 in python-django for jessie LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19537/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Triage gnome-sushi and gnome-font-viewer for jessie LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19536/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19535/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19534/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19533/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19532/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19531/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19530/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19529/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19528/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Add CVE-2019-19527/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19525/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19524/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19523/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Sync more pending CVEs for buster-pu for src:linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage firefox-esr for jessie
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19543/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Demote severity for CVE-2019-19391/luajit
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Fix references to DLA regression updates on website
Brian May
- [Git][security-tracker-team/security-tracker][master] Revert "Fix references to DLA regression updates on website"
Brian May
- [Git][security-tracker-team/security-tracker][master] 2 commits: Fix references to DLA regression updates on website
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update information on CVE-2019-10732/kf5-messagelib
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-149{09,10} as NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Add fixed version for CVE-2019-11745/nss
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track fixed version for firefox-esr via unstable for mfsa2019-37
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update information on CVE-2019-13722/firefox{,-esr}
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] dla: claim firefox-esr
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] Triage CVE-2019-13161 in asterisk for jessie LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] age CVE-2019-11287 and CVE-2019-11291 in rabbitmq-server for jessie LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2020-1 for libonig
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-18849/tnef as no-dsa for buster and stretch
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track proposed update for stretch-pu for CVE-2019-18197/libxslt
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2017-18247/libav: jessie ignored
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-9689/axtls
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Convert some older NFUs for axTLS to the (now) present itp bug for axtls
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19555/fig2dev
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-1834{5,6,7}/davical
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track fixed firefox issues for mfsa2019-36 via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-19555/fig2dev
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19331/knot-resolver
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] smplayer non issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] CVE-2019-19555/fig2dev fixed in unstable upload
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-19331/knot-resolver
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19332/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update list of CVEs for linux/4.19.87-1 upload to buster-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track fig2dev update for buster-pu and stretch-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-15099/linux for pending via buster-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19579/xen (XSA-306)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19553/wireshark
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process one NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some more NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] wireshark postponed
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] 2 commits: Triage CVE-2019-19553 in wireshark for jessie LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-19260/gitlab-workhorse as no-dsa
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19590/radare2
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update information on CVE-2019-12614/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19602/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] libav: jessie triage update
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] libav: jessie triage update
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2021-1 for libav
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] Triage davical for Jessie
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] LTS/claim davical in dla-needed.txt
Roberto C. Sánchez
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-1933{3,4}/libyang
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reference upstream commits for CVE-2019-1933{3,4}/libyang
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-15897
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19317/sqlite3
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Triage sqlite3 for Jessie
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Claim sqlite3
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] new openslp issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19617/phpmyadmin
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUsProcess NFUsProcess NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Triage phpmyadmin for Jessie
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] CVE-2019-19317/sqlite3: < 3.31.0 not-affected
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage librabbitmq for jessie LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim librabbitmq.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Update CVE-2019-19317 for up to unstable version
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2019-19244/sqlite3
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track note for CVE-2019-14899
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2022-1 for librabbitmq
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] tnef fixed
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] thrift fixed in experimental
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] sqlite3 in Jessie is not affected by any CVE(s)
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] new openssl issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Remove bogus file
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] nss DSA
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new puma issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Add upstream commit references for CVE-2019-1551/openssl
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] new thunderbird issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Add upstream commit reference for CVE-2019-16770/puma
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-16770/puma
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Minor bug in luajit
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Add and claim openssl
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2019-9466
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage thunderbird for jessie LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage jruby for jessie LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage openslp-dfsg for jessie LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Mark CVE fixes for linux/5.3.15-1 upload to unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19624/opencv
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19601/texlive-bin
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Change annotation for CVE-2019-11921
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-119{30,34,35}/hhvm
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2018-1002102/kubernetes
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-15151/adplug
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add commit references for CVE-2019-1834{5,6,7}/davical
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-17402/exiv2
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add additional commit reference for CVE-2019-1834{5,6,7}/davical
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-19246/libonig
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for davical issues
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Add Debian bug reference for CVE-2019-19270
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Update status of squid3 in dla-needed.txt
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-1551 unaffected for Jessie
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2024-1 for phpmyadmin
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Add note for ruby-rack-cors
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Claim jruby in dla-needed.txt
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Claim openslp-dfsg
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2025-1 for openslp-dfsg
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] mark limnoria CVE as fixed
Mattia Rizzolo
- [Git][security-tracker-team/security-tracker][master] Revert "mark limnoria CVE as fixed"
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Fix indentation for CVE-2019-1551 entry
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Remove no-dsa tagged entry which has update via DLA-2025-1
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Sync status for linux CVEs with kernel-sec triage
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-1944{7,8,9}/linux (sync from kernel-sec)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version via unstable for CVE-2019-19553/wireshark
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19630/htmldoc
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add new libsixel issues
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] waiting for feedback from slurm maintianer
Abhijith PA
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim python-oslo.utils
Abhijith PA
- [Git][security-tracker-team/security-tracker][master] 3 commits: Triage CVE-2019-19624 in opencv for jessie LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Mark phpmyadmin as still pending release.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Sponsored phpmyadmin 4:4.2.12-2+deb8u7 to security-master.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Update information on CVE-2019-12094 and CVE-2019-12095
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2019-19269 and CVE-2019-19270 via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] update note otrs2
Abhijith PA
- [Git][security-tracker-team/security-tracker][master] dla-needed.txt/date correction
Roberto C. Sánchez
- [Git][security-tracker-team/security-tracker][master] dla: still ongoing
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] Add upstream commit to adress CVE-2019-19630/htmldoc
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] update note
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] thrift moved to unstable with 0.13.0-2 upload
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update notes for ibus
Brian May
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add and claim htmldoc
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Update not for CVE-2019-1551
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2026-1 for htmldoc
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity
Holger Levsen
- [Git][security-tracker-team/security-tracker][master] Lamby sponsored the upload of htmldoc
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] htmldoc no-dsa
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] dla: claim thunderbird
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] dla: update notes, reclaim clamav, freeimage and reportlab
Hugo Lefeuvre
- [Git][security-tracker-team/security-tracker][master] CVE-2019-15845,jruby: Jessie is not vulnerable
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19648/yara
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] firefox DSA
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-14861/samba
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-14870/samba
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-11065/gradle
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2027-1 for jruby
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2028-1 for squid3
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Readd squid3 to dla-needed.txt
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Claim jackson-databind in dla-needed.txt
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19338/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2029-1 for firefox-esr
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] CVE-2019-14892,CVE-2019-14893,jackson-databind were fixed in 2.4.2-2+deb8u9
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2030-1 for jackson-databind
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2031-1 for freeimage
Hugo Lefeuvre
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-14889/libssh
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add new git issues
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for git update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Add version fixed for CVE-2019-1352
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-14889/libssh
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] buster/stretch triage
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] New git issues fixed in unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Remove notes for REJECTED entry
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] LTS/add and claim git
Roberto C. Sánchez
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17357/cacti
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17358/cacti
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update information on CVE-2017-15298/git
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-1962{8,9}/gitlab
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add additional reference for CVE-2019-19604
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19646/sqlite3
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19645/sqlite3
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add src:heimdal for CVE-2019-14870
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add new chromium issues (79.0.3945.79 release)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add chromium to dsa-needed list
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark some issues for envoy proxy as NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2019-19338
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track proposed update for clamav via stretch-pu un buster-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Track proftpd-dfsg update via stretch-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-19617/phpmyadmin as no-dsa
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Triage CVE-2019-17357 in cacti for jessie LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim cacti.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2032-1 for cacti
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/DLA/list: Correct reference to CVE-2019-17358 in cacti.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19583/xen
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-1958{1,2}/xen
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 4 commits: Remove doubled note
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] heimdal no-dsa
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Three davical issues fixed in unstable (CVE-2019-1834{5,6,7})
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2019-15681/libvncserver fixed in unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19720/yabasic
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process two NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19603/sqlite3
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update entry for intel-microcode
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-12095/php-horde-trean as no-dsa
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-1209{4,5}/php-horde as no-dsa for buster and stretch
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Remove obsolete WIP note
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19725/sysstat
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-19645/sqlite3
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19687/keystone
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 3 commits: mark CVE-2019-14870 as no-dsa for jessie
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-19687/keystone
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19339 as NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Several chroimium issues fixed in unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some more NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19746/fig2dev
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-19746/fig2dev
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] new snakeyaml issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new mediawiki issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Triage CVE-2019-19687 in keystone for jessie LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Add CVE-2018-11805 and CVE-2019-12420 for spamassassin
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update spamassassin entries
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] dla-needed: take xcftools
Hugo Lefeuvre
- [Git][security-tracker-team/security-tracker][master] CVE-2019-19725/sysstat: jessie not-affected
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] yabasic unimportant
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process two NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track upstream fix for CVE-2019-12420
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-5841/chromium (fixed in 75.0.3770.80 upstream)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-5843/chromium
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-14317/wolfssl
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug tracking items for CVE-2019-12420 and CVE-2018-11805
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add temporary tracking item for spip issue
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 4 commits: add yara
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-19242/sqlite3
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version via unstable for CVE-2019-19687/keystone
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-19725/sysstat
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19767/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19768/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19769/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19770/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add spamassassin to dsa-needed list
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: re-claim tightvnc
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] giflib fixed
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFU
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new npm/sixel issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new radare issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new dovecot issue (n/a)
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] add references
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFUs, one imagemagick dupe by Android
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] spip n/a for older releases
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] sysstat unimportant
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] spip, davical DSAs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Reserve follow up DSA number for intel-microcode update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process two NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process more NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2017-6519/avahi fixed in unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Mark CVE-2017-14062/libidn as no-dsa
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] LTS: mark CVE-2019-12095/php-horde-trean and CVE-2019-12094/php-horde as <no-dsa>
Roberto C. Sánchez
- [Git][security-tracker-team/security-tracker][master] LTS/remove php-horde-trean, which has no remaining open issues
Roberto C. Sánchez
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2033-1 for php-horde
Roberto C. Sánchez
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2034-1 for davical
Roberto C. Sánchez
- [Git][security-tracker-team/security-tracker][master] Reference upstream commits for CVE-2019-2228/cups
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track php-horde update via {stretch,buster}-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-1934{1,2,3} as NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19796/yabasic
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] annotate CVE-2019-19604/git as not affecting jessie
Roberto C. Sánchez
- [Git][security-tracker-team/security-tracker][master] Add reference to upstream issue for CVE-2018-11805
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for spamassassin update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] 3 commits: mark CVE-2019-19778 and CVE-2019-19777 as no-dsa for jessie
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-12922 as no-dsa
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2018-19969 as no-dsa
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2019-15845/ruby2.5
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Take ruby2.5 from dsa-needed list
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2019-16201/ruby
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2019-16254
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2019-14889/libssh fixed in unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] thunderbird DSA
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] CVE-2019-17531/jackson-databind fixed in unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-2228/cups
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-14870/heimdal
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] dla: ongoing
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] 3 commits: mark CVE-2019-17632 as not affected in Jessie
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] Additional upstream commit for CVE-2019-1352/git
Roberto C. Sánchez
- [Git][security-tracker-team/security-tracker][master] Annotate second commit for CVE-2019-1352
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19807/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19797/fig2dev
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-19797 rather as no-dsa
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19783/cyrus-imapd
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-11459/atril
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] dla: take spamassassin
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2036-1 for thunderbird
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] freeimage/jessie: postpone CVE-2019-1221{4, 2}
Hugo Lefeuvre
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2037-1 for spamassassin
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] Add entry for debian-edu-config issue
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] samba, freerdp2 fixed
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Looked a little into libjpeg-turbo.
Ola Lundqvist
- [Git][security-tracker-team/security-tracker][master] Looked into libexif and noted the results.
Ola Lundqvist
- [Git][security-tracker-team/security-tracker][master] Added my own name so people know who added the note.
Ola Lundqvist
- [Git][security-tracker-team/security-tracker][master] Add cyrus-imapd to dsa-needed
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] buster/stretch triage
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-19797/fig2dev
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] debian-edu-config fixed in unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process one NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] atril spu
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-14607
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2019-15681/libvncserver fix proposed via buster-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Fix for CVE-2019-15681/libvncserver proposed via stretch-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track proposed fix for CVE-2019-17177/freerdp2 via buster-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Four ssvnc issues fixed via unstable (CVE-2018-2002{0,1,2,4})
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process two NFUs in Apache Superset
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-18806 as unimportant
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2019-19830/spip assigned
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add some CVE synced from kernel-sec for linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for ruby2.5 update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for ruby2.3 update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] new golang-github-miekg-dns issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-10773/node-yarnpkg
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] dla: take libssh
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2038-1 for libssh
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] new excon issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Jenkins plugins NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] CVE-2019-10773/node-yarnpkg fixed via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DSA-4588-1 for python-ecdsa (CVE-2019-14853, CVE-2019-14859)
Sebastien Delafond
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-16779/ruby-excon
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add temporary entry for new wordpress issues
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 4 commits: CVE-2015-8947 postponed until now
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2040-1 for harfbuzz
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19241/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19847/libspiro
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] new chromium issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Add note for slurm in dla-needed
Abhijith PA
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19724/singularity-container
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add upstream commit for CVE-2019-19724
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Two CVEs for roundcube fixed in unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process more NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process more NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Add debian-edu-config and claim it.
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] data/CVE/list: Mark libspiro/jessie as not affected by CVE-2019-19847
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] Manually expand entry for CVE-2019-19844 whilst I have the links/bug etc.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] 2 commits: data/dla-needed.txt: Triage python-django for jessie LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Adjust brackets for temporary description
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track upstream commits for CVE-2019-19844
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-18389/virglrenderer
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] dla: take ibus
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] 2 commits: Add CVE-2019-18389/virglrenderer
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Reserve DLA-2041-1 for debian-edu-config
Dominik George
- [Git][security-tracker-team/security-tracker][master] Track CVE-2019-3467 id for debian-edu-config issue
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update note for intel-microcode needed DLA
Ben Hutchings
- [Git][security-tracker-team/security-tracker][master] Correct date for my note in dla-needed.txt
Ben Hutchings
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: add ruby-excon
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2042-1 for python-django
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2019-19844/python-django fixed in unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-5152/shadowsocks-libev
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-16782/ruby-rack
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-16782/ruby-rack
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19880/sqlite3
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark sqlite3 for CVE-2019-19880 as not-affected for stretch and earlier
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] debian-edu-config DSA
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Add clarifying note for CVE-2019-5152
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-18391/virglrenderer
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] data/CVE/list: For npm/jessie mark CVE-2019-1677{5,6,7} as ignored.
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] Add new php issues
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: add ruby-rack
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] data/{dla-needed.txt,CVE/list}: triage transfix/jessie regarding CVE-2019-19797
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] Correct source package name
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: claim libjpeg-turbo
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] Two CVEs CVE-2019-5870 and CVE-2019-13720 are associated as well with qtwebengine-opensource-src
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add new issue in nethack
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Revert "Two CVEs CVE-2019-5870 and CVE-2019-13720 are associated as well with...
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] data/{dla-needed.txt,CVE/list}: CVE-2019-2201/libjpeg-turbo only gets...
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] add mediawiki reference
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Claim packages and update notes
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] data/CVE/list: mark CVE-2019-2201/libjpeg-turbo as already fixed in experimental
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] Add note for ruby-rack
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] 2 commits: issues fixed now
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] CVE-2019-19905/nethack assigned
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19906/cyrus-sasl2
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] data/CVE/list: mark currently open CVEs for libjpeg-turbo as resolved in experimental
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] 2 commits: data/CVE/list: for CVE-2019-15681, also apply <no-dsa> tags to italc and vino
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] data/CVE/list: tightvnc also affected by CVE-2018-7225
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add cyrus-sasl2 to dsa-needed list
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19907/kopanocore
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track new CVEs for Backdrop CMS (itp'ed as #914257)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] data/CVE/list: tightvnc also affected by CVE-2018-20021
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] data/CVE/list: tightvnc also affected by CVE-2018-20020
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] data/CVE/list: tightvnc also affected by CVE-2018-20022
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: add cyrus-sasl2 and claim it
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: add php5
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] claim php5
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] cyrus-imapd DSA
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] add and take mediawiki
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] add missing CVE ID
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-19906/cyrus-sasl2
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] mediawiki fixed
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] jessie and stretch are not affected. strutils.py in oslo.utils is
Abhijith PA
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2043-2 for gdk-pixbuf
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] Properly sort suites top-down
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update information on CVE-2019-3866
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] new undertow issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: add nethack (minor issue)
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2044-1 for cyrus-sasl2
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim nethack
Abhijith PA
- [Git][security-tracker-team/security-tracker][master] Add references for gitlab which should hopefully help tracking fix
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for cyrus-sasl2 update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 4 commits: data/CVE/list: tightvnc is affected by CVE-2014-6053, too.
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] CVE-2019-18389 and CVE-2019-18391 for virglrenderer fixed in unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-12418/tomcat*
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17563/tomcat*
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update notes on CVE-2019-16787
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17571/apache-log4j1.2
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-15584/gitlab
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Remove some TODOs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-1991{7,8}/lout
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19919/node-handlebars
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-1991{7,8}/lout
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] data/CVE/list: Mark CVE-2019-15680 as unimportant; as requested by the security team.
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] mark CVE-2019-11049 for Jessie as not-affected
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-17571/apache-log4j1.2
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Vulnerable code added in a later version. Jessie version has different
Abhijith PA
- [Git][security-tracker-team/security-tracker][master] CVE-2019-18180: Sort suites top-down
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2045-1 for tightvnc
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] data/DLA/list: replace CVE-2018-20020/libvncserver by CVE-2019-8287/tightvnc
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] CVE-2019-15680: add italc and libvncserver (both: unimportant).
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: add x2goclient and claim it (regression fix for recent libssh upload needed)
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] 2 commits: Add Debian bug reference for npm issues
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Add note for CVE-2019-14889 breaking reverse dependencies
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add reference to Debian bug for x2goclient regression caused by libssh update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: add apache-log4j1.2 (with suggestion to eol it).
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: add (orphaned package) lout (with comment)
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] 2 commits: data/dla-needed.txt: add tomcat{7,8}
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2046-1 for opensc
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-1991{7,8}/lout as no-dsa for stretch and buster
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2019-3866/python-oslo.utils via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-3866 as no-dsa for buster and stretch
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Slightly reshuffle entries for next-point-update.txt
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2019-3866/python-mistral-lib fixed via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track proposed update for CVE-2019-5429/filezilla via buster-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim tomcat8
Abhijith PA
- [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-19630/htmldoc
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-1923{2,4}/sudo
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim apache-log4j1.2 with the intention to investigate EOLing it.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-14870/heimdal
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Claim intel-microcode in dla-needed.txt
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] 2 commits: Add CVE-2019-19920/sa-exim
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Clarify that sa-exim issues are documented in README.greylisting.gz
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Sync pending CVEs for src:linux via buster-pu with kernel-sec
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19922/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Several libonig issues fixed in untable via new upstream version
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track proposed fixed for npm via buster-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2038-2 for x2goclient
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2047-1 for cups
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] update note
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] dla: still ongoing
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] CVE-2019-16787 confirmed REJECTED and remote notes
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19791/lemonldap-ng
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Several tightvnc issues fixed in unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-1923{2,4}
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity
Holger Levsen
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add information on CVE-2019-19926/sqlite3
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: claim otrs2 again
Abhijith PA
- [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-19791/lemonldap-ng via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update information on CVE-2019-19847/libspiro
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-18388 and CVE-2019-18390 for virglrenderer
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2019-10222/ceph fixed in unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2019-19725/sysstat fixed in unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] NFU, now clarified/fixed by MITRE
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-19847/libspiro
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] new imagemagick issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new linux issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] "new" chromium issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] 2 commits: Add Debian bug reference for CVE-2019-1678{5,6}/waitress
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-19948/imagemagick
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-19949/imagemagick
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19953/graphicsmagick
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19951/graphicsmagick
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19950/graphicsmagick
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-19953/graphicsmagick
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2019-2228/cups fixed via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-19907/kopanocore
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19956/libxml2
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19925/sqlite3
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19953/graphicsmagick fixed version in unstable
László Böszörményi
- [Git][security-tracker-team/security-tracker][master] 3 commits: Add CVE-2019-19923/sqlite3
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19966/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19965/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process one NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process two more NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19954/signal-desktop
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19963/wolfssl
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19962/wolfssl
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19960/wolfssl
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Remove postponed entry for CVE-2019-1551/openssl1.0
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update information on CVE-2019-10214/singularity-container
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-17357/cacti
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-17358/cacti
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-18610/asterisk
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-18790/asterisk
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-19479/opensc
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] LTS/git status update
Roberto C. Sánchez
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19977/libesmtp
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 3 commits: Reference upstream commit for CVE-2019-19647/radare2
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track upstream commit for CVE-2019-19794/golang-github-miekg-dns
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Fix inconsistent leading ident before if statement
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-19794/golang-github-miekg-dns
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-19906/cyrus-sasl2 via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2019-19232,CVE-2019-19234,sudo: Mark as no-dsa for Jessie.
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] libyang fixed
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] mediawiki DSA
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] CVE-2019-12422,shiro: Link to fixing commit
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] 2 commits: Reference advisory for CVE-2019-13611/python-engineio
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2019-12422,shiro: Mark as no-dsa for Jessie.
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Group source and NOTEs for CVE-2019-12422
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-1569{1,2,3,4,5}/tigervnc
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs for theme(s) for WordPress
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2018-1311/xerces-c
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-1569{1,2,3,4,5}/tigervnc
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2019-16785,CVE-2019-16786,waitress: Mark as no-dsa for Jessie
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2018-1311/xerces-c
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Splitup temporary entry for Wordpress into two assigned CVEs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-5108/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2019-19952,imagemagick: Jessie is not affected.
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] 3 commits: Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process more NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-7621/kibana
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-16789/waitress
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add information on CVE-2019-19882
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: add tigervnc and claim it
Mike Gabriel
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17006/nss
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-2002{2,3,4}/libsixel
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-20021/upx-ucl
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add new libredwg issues
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add new set of libmatio issues
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-20016/libmysofa
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] otrs fixed
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-20016/libmysofa
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-20016/libmysofa as no-dsa
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add three more CVEs assigned for wordpress (for issues in 5.3.1 release)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-20021/upx-ucl
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] dla-needed: take imagemagick, update notes
Hugo Lefeuvre
- [Git][security-tracker-team/security-tracker][master] Clone bug for CVE-2019-1221{2,4}/freeimage to separate bugs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] track CVE-2019-3467 also for debian-lan-config
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for debian-lan-config issue
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add debian-lan-config to dsa-needed list
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add old CVE (CVE-2012-3462) for sssd
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add two new gitlab issues
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] two liblivemedia issues fixed in experimental
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Reserve DSA-4593-1 for freeimage
Hugo Lefeuvre
- [Git][security-tracker-team/security-tracker][master] tomcat8, debian-lan-config, openssl1.0 DSAs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Process one NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] ezxml (not packaged) is embedded in some sources
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] wolfssl fixed
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-20054/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-20053/upx-ucl
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-20053
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-20052/libmatio
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-20051/upx-ucl
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] dsa-needed: take xcftools, add note to cacti
Hugo Lefeuvre
- [Git][security-tracker-team/security-tracker][master] 4 commits: data/dla-needed.txt: Triage waitress for jessie LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-1972{7,8}/slurm-llnl
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-17571 as EOL in Jessie LTS, adding reference in src:debian-security-support.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Track CVE fixes for linux upload to unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Claim apache-log4j1.2 and nss in dla-needed.txt
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2048-1 for libxml2
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Triage sqlite3 for Jessie.
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version for wordpress issues via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2019-1735{7,8}/cacti via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-20055 as NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] dla-needed: take libexif
Hugo Lefeuvre
- [Git][security-tracker-team/security-tracker][master] fix cross ref for debian-lan-config
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] 4 commits: Remove one unused NOTE
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-3811/sssd
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2049-1 for imagemagick
Hugo Lefeuvre
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Fix source package name entry for CVE-2019-3866
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-10086 as no-dsa for stretch and buster
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2017-12173/sssd as no-dsa for stretch
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track fixed version for sqlite3 issues via unstable upload
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track proposed update for CVE-2017-12173/sssd via stretch-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2050-1 for php5
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] Track proposed roundcube update via buster-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track tightvnc update via stretch-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track tightvnc update via buster-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] dla: Still ongoing
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-20096/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-20095/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-20095/linux as not-affected
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-20094/libsixel
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-20093/libpodofo
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some more NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-20079/vim
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-20063/libmysofa
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2019-17357/cacti: stretch not-affected
Hugo Lefeuvre
- [Git][security-tracker-team/security-tracker][master] update note
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] Mark tightvnc issues as no-dsa
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 3 commits: Mark CVE-2019-19919/node-handlebars as no-dsa
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Correctly indent entries with tabs for consistency
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-19919 as no-dsa for stretch
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Reference upstream fix for CVE-2019-19590/radare2
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] this had been fixed
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] CVE-2016-1000021 confirmed to be rejected
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track fixing commit for CVE-2018-1000825/freecol
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2051-1 for intel-microcode
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-19590/radare2
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Several tigervnc issues fixed in unstable via new upstream version
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process more NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-20140/libsixel
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Add CVE-2019-13465/ros-ros-comm
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] sixel no-dsa
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2052-1 for libbsd
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] Remove no-dsa tagged entry as libbsd got an update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update tracking for CVE-2019-17534/vips
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-14864/ansible
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19927/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-20175/qemu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-20056/libsixel
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track several new gpac issues
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Re-add libgcrypt20 for jessie LTS as I think the fix for...
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] liblivemedia fixed
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] cups spu
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-19921/runc
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark for now CVE-2019-19921 as undetermined
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add proposed update for cups via stretch-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2019-7733 via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2053-1 for otrs2
Abhijith PA
- [Git][security-tracker-team/security-tracker][master] CVE-2019-19791,lemonldap-ng: Mark as no-dsa for Jessie
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Triage libsixel for Jessie
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Add graphicsmagick to dla-needed.txt
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Add debian-lan-config to dla-needed.txt
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Add xerces-c to dla-needed.txt
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] CVE-2019-20093,libpodofo: Mark as no-dsa for Jessie.
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2054-1 for jhead
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2018-20349 has been fixed
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Remove no-dsa tagged entries wich got update in DLA-2054-1
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Claim debian-lan-config
Utkarsh Gupta
Last message date:
Tue Dec 31 23:12:20 GMT 2019
Archived on: Tue Dec 31 23:12:22 GMT 2019
This archive was generated by
Pipermail 0.09 (Mailman edition).