October 2019 Archives by thread

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...

Starting: Tue Oct 1 00:08:29 BST 2019
Ending: Thu Oct 31 23:11:59 GMT 2019
Messages: 712

• [Git][security-tracker-team/security-tracker][master] Claim ruby-mini-magick   Utkarsh Gupta
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: claim phpbb3   Mike Gabriel
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1942-1 for phpbb3   Mike Gabriel
• [Git][security-tracker-team/security-tracker][master] 2 commits: data/CVE/list: Fix CVE-2019-13376 and CVE-2019-16993. The patch listed under...   Mike Gabriel
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] dla-needed: claim clamav and openjpeg2   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] buster/stretch triage   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] buster/stretch triage   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] new undertow issue   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] CVE-2019-13376/phpbb3: clear-up confusion following my registering...   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] CVE-2018-20839/xorg-server: precise triage   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Sebastien Delafond
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2019-13504/exiv2: reference main patch   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] dla: add thunderbird   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] CVE-2019-16370,CVE-2019-15052/gradle: jessie postponed   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] dla: add libapreq2   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] CVE-2019-0193/lucene-solr: reference commit, request dla   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] CVE-2019-12401/lucene-solr: issue potentially in dependencies   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] Remove now TODO items for CVE-2019-14369 and CVE-2019-14370 after check   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add back original CVE assignment reference for CVE-2019-13504   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-12401 add additional reference for the upstream fix   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-1705{2,3,4,5,6}/linux   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] openssl DSAs   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] 2 commits: Process some NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] 2 commits: Process some NFUs   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-1694{2,3}/jackson-databind   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] putty non-issue   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] 2 commits: Add fixing commit for CVE-2019-17069/putty   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Update information for CVE-2019-17068/putty   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-1694{2,3}/jackson-databind   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add libapreq2 to dsa-needed list   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] LTS/claim libreoffice   Roberto C. Sánchez
• [Git][security-tracker-team/security-tracker][master] CVE-2019-16935/python3.8 fixed in unstable with 3.8.0~rc1-1 upload   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-16935/python3.7 fixed in unstable via 3.7.5~rc1-1 upload   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-1485{0,1}/nbdkit   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim libapreq2.   Chris Lamb
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17075/linux   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] 2 commits: dla: add novnc   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] dla-needed: update clamav notes   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2019-14491,CVE-2019-14492,CVE-2019-14493/opencv: jessie postponed   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: claim novnc   Abhijith PA
• [Git][security-tracker-team/security-tracker][master] Update information for buster and stretch for CVE-2019-14851/nbdkit   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2019-16910/polarssl: reference patch, request dla   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] dla: typo: polar-ssl -> polarssl   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] CVE-2019-10723/libpodofo: revisit my triage   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] Claim ibus in dla-needed.txt   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] 2 commits: Remove information on CVE-2019-15290   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-16676/ruby-simple-form   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-11929/hhvm   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] dla-needed: clamav: document libclamav 7 -> 9 transition   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1943-1 for jackson-databind   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-3834   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-11253/kubernetes   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] 3 commits: Add CVE-2019-13628/wolfssl   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Process one NFU   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process one NFU   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process one NFU   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1944-1 for libapreq2   Chris Lamb
• [Git][security-tracker-team/security-tracker][master] gen-DLA: reminder for package short description / context   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] CVE-2019-8943/wordpress: precise jessie triage   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] CVE-2019-12922/phpmyadmin: reference patch, mark unfixed, jessie triage   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] Revert "gen-DLA: reminder for package short description / context"   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] Add jackson-databind to dsa-needed list   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-15139/imagemagick   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-3685/osc: reference BTS   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-15140/imagemagick   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-15139/imagemagick   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-15140/imagemagick   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-1010091/tinymce: jessie triage   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-5448/node-yarnpkg as no-dsa   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-1694{2,3}/jackson-databind fixed in unstable   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Track proposed fix for CVE-2019-5448/node-yarnpkg via buster-pu   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-16866/unbound   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-16866/unbound as not affected for stretch   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-15166/tcpdump   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add new libpcap issues   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-16866/unbound   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] 2 commits: Add CVE-2018-16301/libpcap   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Update affected status for libpcap issues CVE-2019-1516{1,2,3,4}   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] 2 commits: Add upstream issue reference for CVE-2018-19519/tcpdump   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for tcpdump issues   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] LTS/claim openconnect   Roberto C. Sánchez
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1945-1 for openconnect   Roberto C. Sánchez
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17113/libopenmpt   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2019-16866/unbound: jessie not-affected   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] CVE-2018-16301/libpcap: asked upstream for info   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17133/linux   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-16866/unbound via unstable   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-16275/wpa via unstable   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reference commit for CVE-2019-13990 resolving upstream issue   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2018-11768/hadoop   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] LTS/claim ampache   Roberto C. Sánchez
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for libapreq2 update   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] claim mosquitto   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-14553/edk2   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-14553/edk2   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-9959/poppler   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-19959/poppler   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-14553/edk2: jessie end-of-life   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: claim libpcap   Abhijith PA
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2019-10871/poppler: reference upstream fix, unset jessie postposned   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] Track DSA-4509-2 for subversion   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1946-1 for novnc   Abhijith PA
• [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-13453/zipios++   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1947-1 for libreoffice   Roberto C. Sánchez
• [Git][security-tracker-team/security-tracker][master] Process NFU   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reserve DSA-4542-1 for jackson-databind   Sebastien Delafond
• [Git][security-tracker-team/security-tracker][master] Track fixes for CVE-2019-12384 and CVE-2019-12814   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Update record for CVE-2018-16301   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add openssh to dsa-needed list (functional regression triggered by openssl update)   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Update references for libmodus issues (additional commits for regression fixes)   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-14379 for DSA-4542-1   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Claim tcpdump and lucene-solr in dla-needed.txt   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] libpcap issues fixed in unstable via new upstream version (1.9.1)   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] edk2 no-dsa   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] 2 commits: Add CVE-2019-10215 and mark as NFU   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Remove listing of CVE-2019-12384 as workaround   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] data/DLA/list: Manual update, add reference to DLA-1942-2 post and associate...   Mike Gabriel
• [Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity   Holger Levsen
  • [Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity   Holger Levsen
• [Git][security-tracker-team/security-tracker][master] new issues in soup, liblnk, jackson-databind   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] 2 commits: dla-needed: claim cacti   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1948-1 for ruby-mini-magick   Utkarsh Gupta
• [Git][security-tracker-team/security-tracker][master] CVE-2018-5727/openjpeg2: add commit link   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17134/octavia   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-17134/octavia   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add libfwsi for CVE-2019-17263   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add upstream references for CVE-2019-17263   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add upstream references for CVE-2019-17264   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-17266/libsoup2.4   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-12401,lucene-solr: Mark as not-affected for Jessie   Markus Koschany
• Processing e1aff2339d1af06e6d4dd92cef9057e6e263095c failed   security tracker role
• [Git][security-tracker-team/security-tracker][master] Fix NOTE   Henri Salo
• [Git][security-tracker-team/security-tracker][master] Remove some additional leading spaces in notes   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for openssh update   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add fixed version via unstable for CVE-2019-16723/cacti   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso
  • [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-1704{1,2}/rsyslog   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Clarify comments on CVE-2019-7637   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] 2 commits: Mark CVE-2019-17134/octavia as no-dsa   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] new otrs issue   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] CVE-2019-17351/linux assigned   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17350/xen   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17349/xen (secondary aspect of XSA-295)   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] 4 commits: CVE-2019-17348/xen assigned (XSA-294)   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] 5 commits: CVE-2019-17344/xen assigned (XSA-290)   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-14845 as NFU   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] NFUs, xpdf n/a   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] Mark solr as n/a in general   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] CVE-2018-{21010,20847,5727}/openjpeg2 fixed in sid   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1949-1 for xen   Bastian Blank
• [Git][security-tracker-team/security-tracker][master] dla-needed: update clamav and openjpeg2   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] fix broken syntax for xen/LTS commit   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-1734{1,2,3} CVEs for the xen advisories fixed in DLA 1949-1   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1950-1 for openjpeg2   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] three unimportant openjpeg2 issues fixed in 2.3.1   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Reclaim xtrlock with update; there had been activity in...   Chris Lamb
• [Git][security-tracker-team/security-tracker][master] Remove information from CVE-2019-1010073   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add NOTE for milkytracker   Utkarsh Gupta
• [Git][security-tracker-team/security-tracker][master] Update fixed version information for CVE-2017-12982   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Update commit reference for CVE-2018-7649   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17359/bouncycastle   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Claim ruby-openid   Brian May
• [Git][security-tracker-team/security-tracker][master] CVE-2018-20847/openjpeg2: add missing commit link   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] dla-needed: add libsdl1.2   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] openjpeg2 2.1.2-1.1+deb9u4: update next-oldstable-point-update.txt   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17362/libtomcrypt   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] new ansible, cargo issues   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] Update version for unstable for CVE-2019-16760   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] dla: update CVE-2019-3689/nfs-util   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] CVE-2019-3689/nfs-util: fs.protected_symlinks would only help for +t...   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] 2 commits: Triage CVE-2019-16760 in cargo for jessie LTS.   Chris Lamb
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage xen for jessie.   Chris Lamb
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage rsyslog for jessie.   Chris Lamb
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim rsyslog.   Chris Lamb
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage libtomcrypt for jessie.   Chris Lamb
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim libtomcrypt.   Chris Lamb
• [Git][security-tracker-team/security-tracker][master] Update note for CVE-2019-17266 - upstream issue appears to be private/embargoed.   Chris Lamb
• [Git][security-tracker-team/security-tracker][master] 2 commits: Upstream issue for CVE-2019-17266 was later on made private   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Update affected status for CVE-2019-17266/libsoup2.4   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] 2 commits: Add Debian bug reference for CVE-2019-16884/runc   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add fixed version via unstable for CVE-2019-15753/python-os-vif   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-17042/rsyslog as no-dsa   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-17041/rsyslog as no-dsa for buster and stretch   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug tracking information for CVE-2019-17042/rsyslog   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-17041/rsyslog   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Update rationale for no-dsa CVE-2019-16375 in otrs2   Chris Lamb
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17401   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Process two NFU   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17266/openssh   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Update py27 references   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1951-1 for libtomcrypt   Chris Lamb
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1952-1 for rsyslog   Chris Lamb
• [Git][security-tracker-team/security-tracker][master] Add new libnbd issue   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add fixed version via unstable for CVE-2019-16884/runc   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Mark golang CVE-2019-16276 as ignored for version 1.3.3 in Jessie   Brian May
• [Git][security-tracker-team/security-tracker][master] Juniper NFUs   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] check-mk removed   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17427/redmine   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17420/libhtp   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1953-1 for clamav   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] python2.7 fixed   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] dla-needed: clarify libsdl{1.2, 2} regressions   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] CVE-2019-7635/libsdl1.2: clarify notes   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] CVE-2019-16905/openssh fixed in unstable   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-7572/libsdl{1.2,2}: add upstream patches   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2019-0193,lucene-solr: Fixed in unstable   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] CVE-2019-0193 restore previously assigned custom severity   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add tzdata and libdatetime-timezone-perl to dla-needed   Ben Hutchings
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17455/libntlm   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17109/koji   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-17455/libntlm   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Several tcpdump issues fixed in unstable   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1955-1 for tcpdump   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] Add reference to upstream issue for CVE-2019-17109/koji   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-17109/koji   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17451/binutils   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17450/binutils   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1956-1 for ruby-openid   Brian May
• [Git][security-tracker-team/security-tracker][master] Add graphicsmagick as well for CVE-2019-16709   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add pull request reference for CVE-2019-14846   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] dla: take tzdata and libdatetime-timezone-perl   Emilio Pozuelo Monfort
• [Git][security-tracker-team/security-tracker][master] new libapache2-mod-auth-openidc   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] libapache2-mod-auth-openidc bug   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] py27 updates   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] CVE-2019-17041,CVE-2019-17042/rsyslog: clarify enabled->loaded   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] 3 commits: data/dla-needed.txt: Correct ordering   Chris Lamb
• [Git][security-tracker-team/security-tracker][master] Add note for libapache2-mod-auth-openidc.   Chris Lamb
• [Git][security-tracker-team/security-tracker][master] ruby-netaddr n/a   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage ansible for jessie   Chris Lamb
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Add note for ansible.   Chris Lamb
• [Git][security-tracker-team/security-tracker][master] Claim ansible   Utkarsh Gupta
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Update note for ansible.   Chris Lamb
• [Git][security-tracker-team/security-tracker][master] CVE-2017-9778/gdb fixed in unstable via new upstream version   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-14846/ansible   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add fixed version via unstable for CVE-2016-10894/xtrlock   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] dla-needed: update libsdl2 entry   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] Track fix via experimental for CVE-2019-11236/python-urllib3   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-14856/ansible assigned   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-14858/ansible   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add new CVE-2019-14853 and CVE-2019-14859 for python-ecdsa   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Process NFUs in D-Link products   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2017-18638/graphite-web   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2018-2102{7,8}/boa   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Remove remaining "not used by any sponsor" justification for Jessie LTS   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for libnbd issue (#942215)   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-16738 via unstable   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] phppgadmin no longer embeds adodb   Jean-Michel Vourgère
• [Git][security-tracker-team/security-tracker][master] libnbd issue (#942215) fixed in unstable upload   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add openssl for regression update   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Take openssl for regression update   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for openssl regression update   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17534/vips   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17533/libmatio   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17531/jackson-databind   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-17533/libmatio   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-17534/vips   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-12838/slurm-llnl fixed in unstable   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2018-18897/poppler fixed in experimental (track for later merge)   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2018-19058/poppler fixed in experimental upload   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2019-7578/libsdl{1.2,2}: add commit links   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] CVE-2018-20650/poppler fixed in experimental   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-7575/libsdl{1.2,2}: add commit links   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] CVE-2019-7573/libsdl{1.2,2}: add commit links   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] CVE-2019-7574/libsdl{1.2,2}: add commit links   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] CVE-2019-9959/poppler fixed in experimental   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Regroup entries   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-9903/poppler fixed in experimental   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reference upstream commit for CVE-2019-14494/poppler   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-14494/poppler fixed in experimental   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-11026/poppler fixed in experimental   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-10871/poppler fixed in experimental   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Update information on CVE-2019-10018/poppler   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add upstream issue reference for CVE-2019-17371   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage graphite-web for jessie   Chris Lamb
• [Git][security-tracker-team/security-tracker][master] dla: this is still ongoing   Adrian Bunk
  • [Git][security-tracker-team/security-tracker][master] dla: this is still ongoing   Adrian Bunk
• [Git][security-tracker-team/security-tracker][master] Take apache2 from dsa-needed list   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] 2 commits: update notes   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] Add and claim unbound (CVE-2019-16866, #941692)   Sebastien Delafond
• [Git][security-tracker-team/security-tracker][master] Claim poppler   Brian May
• [Git][security-tracker-team/security-tracker][master] CVE-2019-16276/golang: clarify jessie triage following conversation with bam   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] Revisit severity for CVE-2019-3689/nfs-utils   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Associate two swagger ui with respective itp'ed items   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] new ffmpeg issue   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] new ffmpeg issue   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] 2 commits: dla-needed.txt: Comment on jackson-databind CVE   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1957-1 for tzdata   Emilio Pozuelo Monfort
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1958-1 for libdatetime-timezone-perl   Emilio Pozuelo Monfort
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1953-2 for clamav   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1713-2 for libsdl1.2   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-14287/sudo   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-14287/sudo   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reference commits for CVE-2019-14287/sudo   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for sudo update   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17546/{tiff,gdal}   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17545/gdal   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17544/aspell   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Update information on CVE-2019-14858/ansible   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add tcpdump to dsa-needed list   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-14858/ansible   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17543/lz4   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1959-1 for xtrlock   Chris Lamb
• [Git][security-tracker-team/security-tracker][master] libofx fixed   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-1759{4,5}/ncurses   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] binutils fixed   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-17545/gdal via unstable   Salvatore Bonaccorso
• Processing 29fc6d0815af67afa930ed08de89eb0119401997 failed   security tracker role
• [Git][security-tracker-team/security-tracker][master] fix syntax   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] ncurses no-dsa   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] dla-needed: update cacti, hdf5 and imagemagick notes   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] Add reference to commit for CVE-2019-17542/ffmpeg   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-1759{4,5}/ncurses   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17223/dolibarr   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for apache2 update   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] dla: add and claim sudo   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] Reserve DSA-4544-1 for unbound (CVE-2019-16866, #941692)   Sebastien Delafond
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-14823/jss   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] mod_openidc fixed   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] new Java issues   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] new virtualbox issues   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] new mysql issues   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] dla-needed: update cacti notes   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for mysql-5.7 issues   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] mark CVE-2019-7317 as not affected in Jessie   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1960-1 for wordpress   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] CVE-2018-14028,wordpress: Remove fixed version   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-647{5,6}/bind9   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add (temporary, until CVE assigned) entry for new wordpress round   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-14287/sudo fixed in unstable   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-14823/jss   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17660/limesurvey   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1714-2 for libsdl2   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-1757{6,7,8}/dolibarr   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1961-1 for milkytracker   Utkarsh Gupta
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17626/python-reportlab   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Remove no-dsa entries which got an update   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Claim graphite-web   Utkarsh Gupta
• [Git][security-tracker-team/security-tracker][master] new chromium issues   Moritz Muehlenhoff
  • [Git][security-tracker-team/security-tracker][master] new chromium issues   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1962-1 for graphite-web   Utkarsh Gupta
• [Git][security-tracker-team/security-tracker][master] Update affected status for CVE-2019-14823/jss   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-1704{0,1,2}/rsyslog via unstable   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Four opencv issues now fixed in unstable with 4.x upload to unstable   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add additional references for wordpress (5.2.4)   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1963-1 for poppler   Brian May
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17666/linux   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-1766{4,5}/ghidra (itp'ed)   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] jss fixed   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] Wordpress issues fixed with 5.2.4 upstream version upload to unstable   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] 3 commits: dla-needed: update cacti and pam-python notes   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] dla: take thunderbird   Emilio Pozuelo Monfort
• [Git][security-tracker-team/security-tracker][master] CVE-2019-16723/cacti: jessie/stretch not affected   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-0205 and CVE-2019-0210 (thrift)   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Fix suite information for CVE-2019-17401/liblnk   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Change wordpress version in DLA/list due by popular request.   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] python2.7 spu   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] graphite-web fixed   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2017-18638/graphite-web as no-dsa   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Virtualbox issues fixed in unstable via 6.0.14 upstream release   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Fix for CVE-2017-18638 proposed via buster-pu   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add one NFU   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2017-1002201/ruby-haml   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-14287/sudo: link backported patches   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1964-1 for sudo   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17547/imagemagick   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17541/imagemagick   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17540/imagemagick   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVEs assigned for issues fixed in WordPress 5.2.4 release   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-18192/guix (itp'ed)   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Process several more NFUs   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Track proposed fix via buster-pu for CVE-2019-15718/systemd   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] 2 commits: Readd wordpress to dla-needed.txt   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] Claim openjdk-7 in dla-needed.txt   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] Claim aspell in dla-needed.txt   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] Some faac issues fixed with new upstream version 1.30   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Sync fixed version for openjdk-8 with unstable upload   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1963-2 for poppler   Brian May
• [Git][security-tracker-team/security-tracker][master] 2 commits: mark CVE-2019-17371 as no-dsa for Jessie   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] next-point-update.txt: add openjpeg2/2.3.0-2+deb10u1   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] Process several NFUs   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-17540/imagemagick: add Debian bug report   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] take openjdk   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] new pillow issue   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] CVE-2019-17540/imagemagick: remove TODO, add commit links   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] mediawiki DSA   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] Add references for CVE-2019-16865/pillow   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Remove listing of CVE-2019-10871 for DLA-1963-1   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Remove cross reference from CVE-2019-10871   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-15939/opencv   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-16249/opencv   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] ttmath is embedded in mapsembler2 freebayes geos   Paul Wise
• [Git][security-tracker-team/security-tracker][master] LTS/ampache status update   Roberto C. Sánchez
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-17596/golang   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for CVE-2019-17596   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-18198/linux   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Fix minor typos   Henri Salo
• [Git][security-tracker-team/security-tracker][master] Fix Typo3 to TYPO3   Henri Salo
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-18197/libxlt   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-18197/libxslt   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-17596/golang-1.12   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-17596/golang-1.13   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-16723/cacti: upstream published a new fix   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1965-1 for nfs-utils   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] CVE-2019-15140/imagemagick: add followup patch   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] CVE-2019-15139/imagemagick: add followup patch   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] DLA-1965-1: Add epoch to version for nfs-utils   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-18209/etherpad-lite   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] dla-needed: update imagemagick notes   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1966-1 for aspell   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-15939,opencv: Mark as postponed for Jessie   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] patches for mosquitto CVE-2019-11778 CVE-2019-11779   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] CVE-2019-16865,pillow: Mark as no-dsa for Jessie   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] Update information on CVE-2019-11778/mosquitto   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Update information on CVE-2019-11779   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-17540/imagemagick: fixing commits for IM6   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] CVE-2019-17540/imagemagick: tag <not-affected>   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] CVE-2019-17541/imagemagick: tag <not-affected>   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] CVE-2018-18024/imagemagick: <ignored> in jessie   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] Adjust syntax for CVE-2019-17540 entry   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-10871,poppler: Mark as postponed for Jessie   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] CVE-2019-17596,golang: Mark as ignored for Jessie   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] Add gdal to dla-needed.txt   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] CVE-2019-17543,lz4: Mark as no-dsa for Jessie   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] Add python-reportlab to dla-needed.txt   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] Mark linux issues as fixed with 5.3.7 upload to unstable   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] nvd.py: Add missing note that CVE description is returned   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add python-ecdsa to dla-needed.txt   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] Mark openjdk-12 as removed from everywhere (Cf. #942495)   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] 2 commits: Add ruby-haml to dla-needed.txt   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] 3 commits: update-nvd: Fetch NVD JSON feeds instead of XML feeds   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-10212/undertow   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Process two NFUsProcess two NFUsProcess two NFUs   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-17534,vips: Jessie is not affected   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] dla-needed.txt: Unclaim ibus, continue to monitor the issue   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] Claim python-ecdsa in dla-needed.txt   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] openjdk-11 DSA   Moritz Muehlenhoff
• Processing 20c4bb9e250eeb6f727d6f14d4c819b38b026b95 failed   security tracker role
• [Git][security-tracker-team/security-tracker][master] fix version   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] Claim libxslt in dla-needed.txt   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] Claim ruby-haml and gdal   Utkarsh Gupta
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1967-1 for libpcap   Abhijith PA
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: claim wordpress   Abhijith PA
• [Git][security-tracker-team/security-tracker][master] dla-needed: take python-reportlab   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] CVE-2019-17626/python-reportlab: add Debian bug report   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1968-1 for imagemagick   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2019-{14981,11470}: remove <postponed> triage   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] chacha20 doesn't exist in 1.0.1   Kurt Roeckx
• [Git][security-tracker-team/security-tracker][master] reclaim mosquitto   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] mark CVE-2017-9354 as not-affected for Jessie and earlier   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] new file issue   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] update note for slurm in dla-needed   Abhijith PA
• [Git][security-tracker-team/security-tracker][master] openjdk-8, tcpdump DSAs   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] new angular issue   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] new linux issue   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] knockout unimportant   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] mark CVE-2019-11281 of rabbitmq-server as no-dsa for Jessie   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] 2 commits: mark CVE-2019-17400 as no-dsa for Jessie   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] Add comments and unclaim ansible.   Utkarsh Gupta
• [Git][security-tracker-team/security-tracker][master] new firefox issue   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] aspell fixed   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] new libidn2 issue   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] new loofah issue   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] new libidn issue   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] firefox-esr fixed   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] dla: take firefox   Emilio Pozuelo Monfort
• [Git][security-tracker-team/security-tracker][master] firefox fixed   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] new golang-github-containers-image issue   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] new libapache-poi-java issue   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] 2 commits: fix typo   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] werkzeug fixed   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1969-1 for file   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] claim proftpd   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] filezilla fixed   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] Marking libcrypt++ CVE as no-dsa since it was done also for buster and...   Ola Lundqvist
• [Git][security-tracker-team/security-tracker][master] All the hdf5 issues are DoS class vulnerabilities and marked as no-dsa for...   Ola Lundqvist
• [Git][security-tracker-team/security-tracker][master] mark CVE-2019-18277 as no-dsa for Jessie   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] ncurses fixed   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] firefox DSA   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] werkzeug spu/ospu   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] new python issue   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] new libarchive issue   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] new qt issue   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] new ATS issue, might be dupe of existing ATS/HTTP2 issues   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] golang, file DSAs   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] 3 commits: mark CVE-2019-17455 as no-dsa for jessie   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] Sync fixed version for CVE-2019-2215/linux with kernel-sec   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reference upstream issue for CVE-2019-14368/exiv2   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Update notes for CVE-2019-14368/exiv2   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-18224/libidn2 fixed in unstable   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-18224/libidn2: Remove stretch and jessie entries   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2019-14863/angular.js   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add fixed version via unstable for CVE-2019-14863/angular.js   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Reference upstream pull request for CVE-2019-17400/unoconv   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Correct source package name for CVE-2019-17498/libssh2   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian BTS reference for CVE-2019-14862/node-knockout   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-17400   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] new thunderbird issues   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] Adjust mfsa2019-34 reference for CVE-2019-15903   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add upstream issue reference for CVE-2019-15587/ruby-loofah   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add fixed version CVE-2019-15587/ruby-loofah   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-17498/libssh2   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-12415/libapache-poi-java   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] 2 commits: dla: claim php5   Sylvain Beucler
• [Git][security-tracker-team/security-tracker][master] Move severity for CVE-2019-18348 to unimportant   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] 2 commits: Add prefix for easier grepping trough the file   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-17400/unoconv   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] add libssh   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] claim angular.js   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1971-1 for libarchive   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] 2 commits: some DLAs will be fixed in next upload   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-2974 for MariaDB as well   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add fixed versions in unstable for CVE-2019-18281   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim libssh2   Abhijith PA
• [Git][security-tracker-team/security-tracker][master] Update notes on CVE-2019-17498/libssh2   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] correct release dates for DLA-1961-1 and DLA-1962-1   Holger Levsen
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1973-1 for libxslt   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1974-1 for proftpd-dfsg   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] 2 commits: claim tiff   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-1145{4,5}/monit as no-dsa for stretch   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Mark lz4 as no-dsa for buster and stretch   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-17543/lz4   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Claim the remaining LTS frontdesk weeks in 2019.   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] new openafs issues   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] dla-needed: update pam-python, freeimage and p-reportlab   Hugo Lefeuvre
• [Git][security-tracker-team/security-tracker][master] new mod-crs issue   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] Adjust references to OpenAFS advisories (s/2018/2019/)   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-16058/pam-p11 fixed in unstable   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] additional ATS HTTP/2 issue has been clarified   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] Update status of OpenJDK 7 in dla-needed.txt   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] milkytracker, ffmpeg fixed   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] CVE block of a CNA was rejected/withdrawn   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-18466 as NFU   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2018-3630 was a non-security issue in edk2 and got REJECTED   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] loofah, PHP DSAs   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1975-1 for spip   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] new cpio issue   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] new samba issues   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] Add tracking bug for CVE-2019-11043 for unstable   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-14864/ansible is not yet fixed in unstable   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add previous reference for cpio bug for CVE-2019-14866   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-14864/ansible   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-1860{1,2,3}/openafs assigned   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2016-9318/libxml2 fixed in 2.9.8 upstream, fixed in experimental   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2017-18258/libxml2 fixed earlier in experimental, add for tracking until merge to unstable.   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2018-14404/libxml2 fixed in experimental with 2.9.9 upload   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2018-14567/libxml2 fixed in experimental   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] 2 commits: Add empty lts-frontdesk.2020.txt   Chris Lamb
• [Git][security-tracker-team/security-tracker][master] 2 commits: claim frontdesk weeks   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] Adding cpio to dla-needed and claiming it. Did this since I take this package for ELTS as well.   Ola Lundqvist
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-13464/modsecurity-crs   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-10218 and CVE-2019-14833 for samba fixed in unstable   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-18604/texlive-bin   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2019-18604/texlive-bin   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-18197/libxslt fixed in unstable   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-15681/libvncserver   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-156{78,79,80}/tightvnc issues   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-15681/libvncserver   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-8287/tightvnc   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2012-6097/cronie fixed (was only ever present in experimental)   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] pam-python DSA   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] Add and claim python-ecdsa (CVE-2019-1485[39])   Sebastien Delafond
• [Git][security-tracker-team/security-tracker][master] Add package versions for all webkit2gtk CVEs in WSA-2019-0005   Alberto Garcia
• [Git][security-tracker-team/security-tracker][master] Add webkit2gtk   Alberto Garcia
• [Git][security-tracker-team/security-tracker][master] 2 commits: data/dla-needed.txt: claim imapfilter   Mike Gabriel
• [Git][security-tracker-team/security-tracker][master] data/{dla-needed.txt,CVE/list}: Mark nghttp2/jessie as <not-affected> by...   Mike Gabriel
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: add libvncserver and claim it.   Mike Gabriel
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Add php-horde-groupware and php-horde-trean.   Mike Gabriel
• [Git][security-tracker-team/security-tracker][master] data/dla-needed: claim php-horde-*.   Mike Gabriel
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1977-1 for libvncserver   Mike Gabriel
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: add italc, tightvnc and vino and claim them   Mike Gabriel
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1978-1 for python-ecdsa   Markus Koschany
• [Git][security-tracker-team/security-tracker][master] Add back trailer for dsa-needed file   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Resort entry in dsa-needed   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] new gitlab issues   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] data/CVE/list: Add italc to plenty CVEs filed against libvncserver. The iTALC...   Mike Gabriel
• [Git][security-tracker-team/security-tracker][master] 2 commits: data/CVE/list: Add italc also to CVE-2014-6051.   Mike Gabriel
• [Git][security-tracker-team/security-tracker][master] CVE-2019-1000020 and CVE-2019-1000019 will be fixed in current upload of libarchive to Stretch   Thorsten Alteholz
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-1979-1 for italc   Mike Gabriel
• [Git][security-tracker-team/security-tracker][master] Some gitlab issues fixed in experimental   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Remove one wrongly added gitlab entry for experiemental fix   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2011-2186 gitweb was disputed and now correctly withrawn by its CNA   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Regroup some italc entries   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-18420/xen   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-18425/xen   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-18421/xen   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-18423/xen   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] CVE-2019-18424/xen   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-18422/xen   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] 4 commits: Process NFUs   Salvatore Bonaccorso
• [Git][security-tracker-team/security-tracker][master] qt, libarchive DSAs   Moritz Muehlenhoff
• [Git][security-tracker-team/security-tracker][master] adplug bugs   Moritz Muehlenhoff

Last message date: Thu Oct 31 23:11:59 GMT 2019
Archived on: Thu Oct 31 23:12:02 GMT 2019

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...