July 2020 Archives by author
Starting: Wed Jul 1 05:25:04 BST 2020
Ending: Fri Jul 31 22:54:30 BST 2020
Messages: 751
- [Git][security-tracker-team/security-tracker][master] claim opendmarc
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] reclaim curl
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] claim mupdf
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] 3 commits: mark CVE-2018-1000038 as not-affected for Stretch
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] 2 commits: update notes
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] add python2.7
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] increase debian_version for Stretch
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] 5 commits: mark CVE-2019-1010259 as not-affected for Stretch
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] mark CVE-2020-15719 as no-dsa for Stretch
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] 9 commits: mark CVE-2020-14664 as no-dsa for Stretch
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] 2 commits: mark CVE-2020-15095 as no-dsa for Stretch
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] 2 commits: CVE for mupdf will be fixed
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] 3 commits: fix for CVE-2019-5188 finally uploaded to Stretch
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] 11 commits: add clamav
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2018-15751 and CVE-2018-15750 will be fixed with the same patch
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2295-1 for curl
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2296-1 for luajit
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2298-1 for libapache2-mod-auth-openidc
Thorsten Alteholz
- [Git][security-tracker-team/security-tracker][master] dla: shift python update
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] dla: update rails status
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] dla: rails: update status
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] dla: drop apache2, only affects jessie / < 2.4.24
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] dla: add package updates planned by security team before the oldstable->LTS switch
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] dla: claim net-snmp
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2019-20892/net-snmp: reference breaking commit range
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] dla: drop net-snmp
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] dla: claim nginx
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] CVE-2019-10160/python3.4: affected via DLA-1835-1
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] CVE-2019-10160/python3.4: actually not-affected, clarify comments
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] dla: rails: clarify pu status
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] CVE-2019-9740/python*: reference regression fix
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] 2 commits: dla: update rails status
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] CVE-2020-8163/rails: regression fix accepted
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] CVE-2013-0337/nginx: clarify status
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] CVE-2020-11724/nginx: reference original patch + tests
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] CVE-2020-11724/nginx: ngx_lua new smuggling regression tests fail in nginx/stretch
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] CVE-2020-11724/nginx: reference BTS
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] dla: update status (nginx, python3.5, rails)
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2280-1 for python3.5
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] CVE-2019-10160/python3.5: both introduced and fixed in DLA-2280-1
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] 2 commits: dla: update status as stretch point release isn't delayed
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2282-1 for rails
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2283-1 for nginx
Sylvain Beucler
- [Git][security-tracker-team/security-tracker][master] Track new firefox{,-esr} issues from mfsa2020-24 and mfsa2020-25
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15395/libmediainfo
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2020-8663 as NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2020-1260{3,4,5} as NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-14058
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-14059
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15049
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track Debian bug for CVE-2020-8185/rails
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Sort suites top-down in entry
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-202-8185: Add back bug report reference
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Reference patch for 6.1.25 for sympa issue (CVE-2020-10936)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add upstream commit information on CVE-2020-14422
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version via unstable for CVE-2020-14422/python3.8
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process more NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-20892
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15469/qemu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-1539{6,7}/hylafax
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version for samba issues via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track ldb as well under CVE-2020-10730
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track some update for cacti via buster-pu sync up status in CVE list
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process several NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUsProcess some NFUsProcess some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15503/libraw
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track fixes for qemu via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track experimental fix for CVE-2020-13645/glib-networking
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2020-11958/re2c via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process several NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track proposed updates for nvidia-graphics-drivers via buster-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-14040/golang-x-text
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Remove no-dsa tagged entry for ruby2.5 which will be included in DSA
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add thunderbird issues from mfsa2020-26
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add thunderbird to dsa-needed list
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug references for {golang-,}golang-x-text issue
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-7663/ruby-websocket-extensions
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Remove postponed tags for php7.0 issues
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Take care of releasing php updates prepared by maintainer (just in time)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for php7.0 update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update information on CVE-2020-7065/php7.0
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 11 commits: add-dsa-needed: Only list packages for stable for dsa-needed list
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] dsa-needed: Remove needing packages which were only for stretch
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] support-ended.py: Add scheduled EOL for stretch in LTS
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Fix source package name for CVE-2020-8014
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track new packages wich are now removed from everywhere
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15466/wireshark
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2020-15007 asn unimportant
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] yui3 was removed from unstable and everywhere
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add new roundcube issue
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version via unstable for CVE-2019-13990/libquartz2-java
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track proposed update for mariadb-10.1 via stretch-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark mariadb-10.1 as no-dsa (will be fixed in point release)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2020-15562/roundcube assigned
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Add extra note for CVE-2019-20892
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark mariadb-10.3 as no-dsa for buster
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track src:linux update for stretch-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add tracking bug for question on CVE-2020-13817/ntpsec
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process one NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15569/milkytracker
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Remove two postponed tags for php7.3
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for php7.3 update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-13990/libquartz-java
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Two unimportant lynis issues fixed on source level in 3.0.0-1 via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-14314/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-14928/evolution-data-server
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Bump version including the fix for CVE-2019-16275/wpa
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2020-13645/glib-networking as no-dsa
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-13645/glib-networking for tracking buster-pu upload
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Remove double package separator in list
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Cleanup further release selectors not needed anymore
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2020-14196/pdns-recursor via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track proposed update for mariadb-10.3 via buster-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for ruby2.5 prepared by maintainer
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add source package tracking for python3.4 and mark as removed
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-14983/crispy-doom
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Correct source package name for CVE-2020-5238/python-cmarkgfm
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for veyon issue (#964568)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2020-13696/xawtv
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-4044/xrdp
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-4044/xrdp
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track CVE fixes for linux via buster-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-8558/kubernetes
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track CVE-202-1507{2,3}/phplist
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Mark fwupd as no-dsa (will be fixed via point release)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track fixes for fwupd via {stretch,buster}-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Remove no-dsa tagged entry, got at same time a DLA
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track proposed updates for storebackup via {stretch,buster}-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track proposed update for jackson-databind via buster-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Track jackson-databind update via stretch-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-14315/bsdiff
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process one NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15095/npm
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-15095/npm
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Adjust status for CVE-2020-15503/libraw
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-15503/libraw
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Add Debian bug reference for CVE-2020-11935/aufs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process one NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2020-4046
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-14315/bsdiff
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-15569/milkytracker
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Adjust upstream reference for CVE-2020-12412
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add upstream comit reference for CVE-2019-16396
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add upstream commit reference for CVE-2019-16395
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2019-1639{5,6}/gnucobol fixed via unstable upload
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Correct ordering of suites in CVE-2019-8320 listing
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Adjust commit references for CVE-2020-10378/pillow
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2020-10379: Add reference to pull request with fixes
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: ksh93 removed from unstable (superceded by revert of src:ksh to ksh93)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add libpam-radius-auth via buster-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add information on CVE-2020-4054/ruby-sanitize
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2020-14040/golang-golang-x-text
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track intellij-community-idea for now as undetermined
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Remove listing of file in next-oldstable-point-update.txt
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Remove busybox from next-oldstable-point-update.txt
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Remove pdfresurrect listing, will not happen anymore
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add DSA entry for xen update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Cleanup xen entries after DSA 4723-1
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track two experimental fixes for gitlab
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-14326/resteasy
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update fixed version for CVE-2020-15572 via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Drop amd64-microcode update from next-oldstable-point-update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track final relevant version for CVE-2020-12049/dbus via {stretch,buster}-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2019-14868/ksh as no-dsa for buster
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-20907/python
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track proposed update for ksh via buster-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] embedded-code-copies: Indent via tabs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Adjust one oss-security reference for CVE-2020-13935/tomcat
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add upstream commit references for CVE-2020-1393{4,5}/tomcat
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-1384{5,6,7}/singularity-container
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for singularity-container issues
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15720/dogtag-pki
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-1313{1,2}/yubico-piv-tool
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track upstream fixes for CVE-2019-20907/python
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2020-15586: Add golang-1.15 source package
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2020-14039: Add golang-1.15 as well to source package listing
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add upstream references for CVE-2020-14330/ansible
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-17566/batik via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process more NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2020-4054/ruby-sanitize
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Sync date with release
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15780/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-20908/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-8203/node-lodash
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-8178/node-jison-lex
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-13351/jackd2
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] chef was removed from unstable, update CVE-2015-8559
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add bug references for CVE-2020-15719/openldap
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2019-20907: Add python3.9 source package as fix in not contained in initial upload
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add golang-github-containernetworking-plugins for CVE-2019-9946
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Several pillow issues fixed in unstable upload
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Upate fixing information for older CVE-2016-3076/pillow
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add qemu to dsa-needed list
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reference RedHat/CentOS patch for CVE-2020-15719
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Oracle CPU references to identify those batched in cpujul2020
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-14576/mysql-5.7
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2020-15719/openldap as unimportant
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Restore CVE list for DLA-2247-1
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Remove one no-dsa tagged entry for libopenmpt
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Take ruby-sanitize from DSA needed list
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2020-13934/tomcat9 fixed in unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed versio nfor CVE-2020-13935/tomcat9 via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update notes for CVE-2020-15719/openldap
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] One veyon issue (#964568, no CVE) fixed via unstable upload
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2020-15389/openjpeg2 as no-dsa
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-15389/openjpeg2
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add upstream reference for CVE-2020-10781/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15803/zabbix
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update information for CVE-2020-15807
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process one more NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15108/glpi
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track various CVEs in Apache Airflow (itp'ed, airflow, #819700)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add new net-snmp issue, #965166
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Sync CVE-2020-10773/linux with kernel-sec
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Sync CVE-2019-18814/linux with kernel-sec
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-18814/linux for pending via buster-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 6 commits: Track removal of libperlspeak-perl
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Adjust source package name for CVE-2020-8178/node-jison
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update information on CVE-2020-8178/node-jison
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-8177/curl
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-8169/curl
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-8203/node-lodash
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-14001/ruby-kramdown
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15117/synergy
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-14001/ruby-kramdown
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-7693/node-socks
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version via unstable for CVE-2020-8203/node-lodash
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update note for rails for buster-security
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2020-8203/node-lodash as no-dsa for buster
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DSA for ruby-sanitize
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for redis update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] weboob was removed from everywhere in the archive
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] libperlspeak-perl removed from everywhere in the archive
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for mpv issue (without CVE)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2019-20907/python3.8 via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add qemu to dsa-needed list
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track proposed update for clamav via buster-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2020-15852/linux assigned (XSA 329)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15121/radare2
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15103/freerdp2
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2020-14336 as NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-13932
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-1776/otrs2
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-1775/otrs2
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track upstream fix for CVE-2016-10228
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update references for CVE-2020-15103/freerdp2
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-15103/freerdp2
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track fix via experimental for CVE-2020-14001/ruby-kramdown
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15859/qemu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process one NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15866/mruby
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2020-15866/mruby: Add reference to upstream commit
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15863/qemu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track fixed version for two CVEs via upload to unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15890/luajit
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2019-20907/python3.9 fixed via unstable upload
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2020-6096/glibc fixed via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update information for old CVE-2008-0455/apache2
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version for net-snmp issue (#965166)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-15803/zabbix
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-15890/luajit
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15917/claws-mail
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-14339/libvirt
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-0305/linux and sync with kernel-sec
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2020-4044/xrdp via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add upstream references for CVE-2020-1722/freeipa
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track fix for CVE-2019-20908 via buster point release
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15900/ghostscript
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2019-11252/kubernetes
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-14297/wildfly
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-14343/pyyaml
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15778/openssh
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for rust-linked-hash-map issue (no CVE)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Correct proposed version for ksh via buster-pu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update information on CVE-2019-10753
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track fixed CVEs for linux via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15945/lua
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add information on CVE-2020-15889/lua
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add references CVE-2020-15888/lua
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add additional references for CVE-2020-15888
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2020-1588{8,9}: correct source package name (typoed)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-14343/pyyaml
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Several libyang issues fixed in unstable (with move from experimental and new upstream version)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track fixes for chromium via experimental (for later merge into unstable entry)
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Remove no-dsa tagged entries which got update in DLA 2291-1
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update information on CVE-2019-20892/net-snmp
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Correct tracking of libjpeg-turbo versions which entered unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] djbdns reintroduced in Debian
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2020-14153: Add reason for not-affected
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Move CVE-2019-16712 to DSA 4712-1 for imagemagick
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add net-snmp for dsa-needed list
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15953/libetpan
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2020-14295/cacti via unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-11110/grafana
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15954/kmail
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-10715 as NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-14331/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update information on CVE-2020-14331/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-12460/opendmarc
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-12460/opendmarc
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update information on CVE-2020-15954
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-16094/claws-mail
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 2 commits: Add new firefox-esr issues from mfsa2020-31
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add new firefox issues from mfsa2020-32
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add new thunderbird issues from mfsa2020-33
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Move foreman entry to CVE-2020-14334
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-12845/cherokee
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2014-3566/netsurf as fixed with 3.6-1
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 3 commits: Add new GRUB2 issues
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add oss-security posts references for GRUB2 issues
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] grub2 issues fixed in unstable
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reference upstream commits for grub2 issues
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for xrdp
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-16118/balsa
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-16117/evolution-data-server
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Remove no-dsa tagged entry wich got update in DLA 2298-1
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reference upstream commit for CVE-2020-16116/ark
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-16135/libssh
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Track fix for net-snmp issue while CVE assignment is pending
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] 3 commits: Add CVE-2020-15862/net-snmp
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add grub2 to dsa-needed for regression fix
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-16135/libssh
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update information on CVE-2020-14339/libvirt
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2020-16116/ark fixed via unstable upload
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-14339/libvirt
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process two NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process more NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for grub2 regression update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Update information on thunderbird issues
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] dd CVE-2020-6070/f2fs-tools
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-16092/qemu
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Sync CVE-2020-15899 NFU wording in related entries
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-14337 as NFU
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add tracking of source package for CVE-2020-6098/freediameter
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-16166/linux
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Move uploads which wont happend to the end of the list for further tracking
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-15861/net-snmp
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Expand note for CVE-2020-15862/net-snmp
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2020-15861/net-snmp
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] CVE-2020-15862: Add note on commit to make extend mib read-only
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-14344/libx11
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add CVE-2020-14347/xorg-server
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2020-16094/claws-mail as no-dsa for buster
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-16094/claws-mail
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2020-9488/apache-log4j2 as no-dsa
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
- [Git][security-tracker-team/security-tracker][master] dla: take nss
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] dla: take ffmpeg
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] dla: Add a note on the point release update for nginx
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] dla: forgot to state who made the comment
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] dla: take milkytracker
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] dla-needed: Add notes for stretch-pu packages
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] dla: take golang-github-seccomp-libseccomp-golang and libjpeg-turbo
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2291-1 for ffmpeg
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2292-1 for milkytracker
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] dla: ongoing
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] Update version information for libjpeg-turbo
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] Upstream says CVE-2020-14153 is not in libjpeg-turbo
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] CVE-2019-11727/CVE-2019-17023: Same applies as for jessie
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] dla: take jruby
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] CVE-2019-2201: Add note that the description is wrong
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2302-1 for libjpeg-turbo
Adrian Bunk
- [Git][security-tracker-team/security-tracker][master] Claim roundcube
Sebastien Delafond
- [Git][security-tracker-team/security-tracker][master] Reserve DSA-4720-1 for roundcube
Sebastien Delafond
- [Git][security-tracker-team/security-tracker][master] webkit2gtk upstream advisory WSA-2020-0006
Alberto Garcia
- [Git][security-tracker-team/security-tracker][master] webkit2gtk DSA-4724-1
Alberto Garcia
- [Git][security-tracker-team/security-tracker][master] CVE-2017-11503: Updated fixed version
Paul Gevers
- [Git][security-tracker-team/security-tracker][master] chromium dsa
Michael Gilbert
- [Git][security-tracker-team/security-tracker][master] chromium regression
Michael Gilbert
- [Git][security-tracker-team/security-tracker][master] chromium regression
Michael Gilbert
- [Git][security-tracker-team/security-tracker][master] Add firefox-esr to dla-needed
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2269-1 for wordpress
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2270-1 for jackson-databind
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2271-1 for coturn
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] CVE-2020-8185/rails is fixed in experimental
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] CVE-2020-XXXX for wordpress's comment leak is fixed by 4.1.31+dfsg-0+deb8u1
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Claim qemu and ruby-rack
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Revert "CVE-2020-XXXX for wordpress's comment leak is fixed by 4.1.31+dfsg-0+deb8u1"
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Drop xen for Stretch LTS
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Drop squirrelmail for Stretch LTS
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Add notes for cacti
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Add notes for tomcat8 and shiro
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2020-15395 as no-dsa for Jessie
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Add openjpeg2 to dla-needed
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Claim openjpeg2
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Add samba to dla-needed
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] 2 commits: Triage ldb for LTS
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Add note for qemu
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2275-1 for ruby-rack
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Claim mailman
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2276-1 for mailman
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Strip no-dsa entries which will recieve an update
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2277-1 for openjpeg2
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Claim libopenmpt and transmission
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Take libpam-radius-auth as issued a DLA from jessie
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Capitalize "stretch" for DLA.template
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Revert "Capitalize "stretch" for DLA.template"
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Add notes for qemu
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2020-13754 as no-dsa/intrusive
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2288-1 for qemu
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Strip no-dsa, ignored, and postponed entries which will recieve an update
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Remove extra entry
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] Add WIP notes
Utkarsh Gupta
- [Git][security-tracker-team/security-tracker][master] 2 commits: Claim tomcat8 in dla-needed.txt
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] jackson-databind: Several CVE are fixed in unstable now.
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] CVE-2020-10672,jackson-databind is also fixed in unstable.
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2278-1 for squid3
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Readd squid3 to dla-needed.txt for CVE-2020-15049
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2279-1 for tomcat8
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] dla-needed.txt: ongoing work for imagemagick
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2286-1 for tomcat8
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Claim libssh in dla-needed.txt Update status of squid3.
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2303-1 for libssh
Markus Koschany
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage fwupd for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim fwupd.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage roundcube for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Triage CVE-2020-12284 in ffmpeg in stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage ffmpeg for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage ceph for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Triage CVE-2020-12675, CVE-2020-12691, CVE-2020-12690 and CVE-2020-12689 for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] 3 commits: dla-needed.txt: Update note for ffmpeg in stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage milkytracker for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Add note for milkytracker
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage puma for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] dla-needed.txt: Add missing preposition.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Triage in CVE-2020-14019 in python-rtslib-fb for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2273-1 for shiro
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] 2 commits: data/dla-needed.txt: Triage mupdf for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage libopenmpt for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage atril for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage transmission for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage mailman for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage json-c for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Add notes on json-c for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage cimg for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2274-1 for fwupd
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] 2 commits: Triage CVE-2020-15503 in libraw for stretch LTS (thumbnailing code added later)
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim gosa.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Drop gosa; it has a pending stretch update in #958850. Thanks, Adrian!
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage golang-github-seccomp-libseccomp-golang for...
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage ruby-zip for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage salt for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Triage CVE-2020-4046 in wordpress for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage wordpress for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage poppler for stretch LTS (CVE-2018-21009, etc.)
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage libjpeg-turbo for stretch LTS (CVE-2020-14152, etc.)
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Triage CVE-2019-8325, CVE-2019-8324, CVE-2019-8323 etc. in jruby for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Triage CVE-2018-1285 in log4net for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] 2 commits: data/dla-needed.txt: Correct ordering
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Triage CVE-2020-10378 in stretch LTS; vulnerable code not present
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage pillow for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage jupyter-notebook for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] dla-needed.txt: Add note re. jupyter-notebook.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage http-parser for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Revert "Triage CVE-2019-8325, CVE-2019-8324, CVE-2019-8323 etc. in jruby for stretch LTS."
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] unsupported_packages.py: Update LTS version to 8.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage ksh for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage sqlite3 for stretch LTS.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim slirp.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] dla-needed.txt: Return slirp to the pool; requires a bit more C hacking than I...
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] org/lts-frontdesk.2020.txt: Swap LTS weeks with permission.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim net-snmp.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim kdepim-runtime.
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2299-1 for net-snmp
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2300-1 for kdepim-runtime
Chris Lamb
- [Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity
Holger Levsen
- [Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity
Holger Levsen
- [Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity
Holger Levsen
- [Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity
Holger Levsen
- [Git][security-tracker-team/security-tracker][master] Remove unbound from dla-needed.txt
Brian May
- [Git][security-tracker-team/security-tracker][master] Remove http-parser from dla-needed.txt
Brian May
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2284-1 for ksh
Brian May
- [Git][security-tracker-team/security-tracker][master] Update Quake family of game engines
Simon McVittie
- [Git][security-tracker-team/security-tracker][master] dla: take firefox-esr
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] tzdata/libdatetime-timezone-perl will get a pu
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] CVE-2020-10730/ldb: add upstream commit
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] dla: take glib-networking
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] fix linux-4.9 entries
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2272-1 for jessie-lts
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] DLA.template: normalize dist name
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] dla-needed: remove roundcube
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-17566/batik
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] 2 commits: DLA.template: add security-tracker link
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2020-11736/file-roller will be fixed via ospu
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] dla: take atril
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] 2 commits: Track proposed update for file-roller via stretch-pu
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] Tag atril issues as no-dsa for stretch, fixed via stretch-pu
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] Track proposed updates for batik via {stretch,buster}-pu
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] lts: claim librsvg
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] dla: take poppler
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] Correct ordering
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] CVE-2020-13645/glib-networking to be fixed via ospu
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] CVE-2019-20446/librsvg to be fixed via buster-pu
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] CVE-2020-14928/e-d-s will actually get a DSA/DLA
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2281-1 for evolution-data-server
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] lts: add notes
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2285-1 for librsvg
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] CVE-2017-11464/librsvg: remove no-dsa tag for stretch
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] Track librsvg update via buster-pu
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] 2 commits: Drop no-dsa tags for poppler issues to be fixed in stretch
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] dla: take clamav
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] lts: clamav ready
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] chromium is EOL in stretch
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] dla: take thunderbird
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] 31 commits: Force keys() to get evaluated as list
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2297-1 for firefox-esr
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] security_db: add missing import
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2017-5461 affected firefox-esr
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] unsupported_packages: remove default Debian version
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] Ignore BootHole and friends in stretch
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] dla: take openjdk-8
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] CVE-2020-8203/node-lodash EOL in stretch
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] dla: take json-c
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2301-1 for json-c
Emilio Pozuelo Monfort
- [Git][security-tracker-team/security-tracker][master] - "new" dnsmasq issue (CVE is for Red Hat, but they essentially found the same...
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new pdns-recursor issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] squid fixed in sid
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] one additional firefox n/a issue (MFSAs are released now)
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] firefox DSA
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] python no-dsa
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFU
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new ndpi issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new samba issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new guacamole-client issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] hylafax no-dsa
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new cakephp issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] docker, imagemagick DSAs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFU
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFUs (concludes external check)
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] add various bugs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] libyang fixed in experimental
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] one teeworlds issue is a dupe
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] kopano n/a
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] thunderbird DSA
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] glib-networking fixed in sid
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] wireshark postponed
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] mariadb-10.3 fixed in sid
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] buster triage
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] jpeg issue already fixed a few years ago
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFUs, requested rejection of duped teeworlds CVE ID
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] python n/a
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] first batch of new xen issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] more xen issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] ffmpeg updates
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] markdown issues, NFU
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new veyon issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] gitlab n/a
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] storebackup fixed in sid
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] xen fixed in sid
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] ffmpeg DSA
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] add and take nss to dsa-needed.txt
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] file-roller spu
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Juniper NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] buster triage
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] libslirp fixed
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] stable triage
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] npm fixed in sid
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] "new" firefox issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] transmission spu
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] mark cpp-httplib as NFU, chromium bundles it, but not treated as security issue there
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] crawl fixed in sid
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new (unimportant) tor issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] stable triage
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] nginx fixed in sid
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new tomcat issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] buster triage
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] older XFS issue unimportant
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new ansible, google-oauth-client-java, golang issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new chromium issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] add golang packages present in oldstable as <removed>
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new issues in golang-github-unknwon-cae (sic!), Go...
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] golang-github-containers-buildah fixed in sid
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new k8s issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new snapd issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new Java issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new vbox issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new openjfx issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] k8s fixed in sid, add another k8s issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new bareos issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] e-d-s DSA
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new openldap issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new linux issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] XSA 329 doesn't affect oldstable/stable
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new eclipse-wtp issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] one pillow issue unimportant
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] add mysql-5.7 issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] remove mariadb entries for now and wait for upstream assessment which apply to mariadb
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new ansible, edk2 issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new node-ajv issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] bug for openldap
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] openjdk-14 fixed in sid
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] xen, tomcat9 DSAs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new clamav issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] qemu, libopenmpt DSAs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFUs, python n/a
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new mpv issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] buster triage
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] squid DSA
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] bugs for markdown issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] qemu bug
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] fix syntax
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] openjdk-11 fixed in sid
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] stable triage
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] kiwix reintroduced and fixed
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] qemu DSA
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] zabbix fixed in sid
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] fix typo in CVE list
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new xnio issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] buster triage
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] pillow spu
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new rust-linked-hash-map issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] commons-configuration2 spu
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] gpp fixed in sid
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] tcpreplay fixed in sid
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] eclipse-wtp was introduced
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] python3.7 spu
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] openjdk-11 DSA
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] imagemagick fixed (a few more need a closer look)
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] more imagemagick fixes in sid
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] more imagemagick fixes in unstable
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] add one mysql issue which was later one added to the CPU
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new chromium issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new webkit issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] firefox fixed in sid
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] firefox DSA
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] add two android-specific Firefox issues
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] new ark issue
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] stable triage
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] ark DSA
Moritz Muehlenhoff
- [Git][security-tracker-team/security-tracker][master] Remove perl from dla-needed.txt
Abhijith PA
- [Git][security-tracker-team/security-tracker][master] Add note to mumble in dla-needed
Abhijith PA
- [Git][security-tracker-team/security-tracker][master] Add note to cacti in dla-needed
Abhijith PA
- [Git][security-tracker-team/security-tracker][master] wpa fixed in stretch 9.13
Abhijith PA
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2020-15866 as no-dsa for stretch
Abhijith PA
- [Git][security-tracker-team/security-tracker][master] Add net-snmp kdepim-runtime to dla-needed
Abhijith PA
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2020-11934 as not-affected for stretch
Abhijith PA
- [Git][security-tracker-team/security-tracker][master] stretch triage
Abhijith PA
- [Git][security-tracker-team/security-tracker][master] Update note in dla-needed.txt
Abhijith PA
- [Git][security-tracker-team/security-tracker][master] Triage stretch
Abhijith PA
- [Git][security-tracker-team/security-tracker][master] Fix typo
Henri Salo
- [Git][security-tracker-team/security-tracker][master] NFU
Henri Salo
- [Git][security-tracker-team/security-tracker][master] LTS: claim samba in dla-needed.txt
Roberto C. Sánchez
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2020-10730/ldb as n/a for stretch
Roberto C. Sánchez
- [Git][security-tracker-team/security-tracker][master] LTS: claim mercurial in dla-needed.txt
Roberto C. Sánchez
- [Git][security-tracker-team/security-tracker][master] LTS: update condor notes
Roberto C. Sánchez
- [Git][security-tracker-team/security-tracker][master] LTS: reclaim samba
Roberto C. Sánchez
- [Git][security-tracker-team/security-tracker][master] 2 commits: LTS: reclaim condor, update status note
Roberto C. Sánchez
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-2293-1 for mercurial
Roberto C. Sánchez
Last message date:
Fri Jul 31 22:54:30 BST 2020
Archived on: Fri Jul 31 22:54:35 BST 2020
This archive was generated by
Pipermail 0.09 (Mailman edition).