Security-tracker moved to Git

[Salvatore Bonaccorso]

Hi

The security-tracker has now been migrated to the new git repository.

See: https://salsa.debian.org/security-tracker-team/security-tracker

After the initial clone please run

bin/setup-repo

to activate the pre-commit syntax-check hook.

Access to the old subversion repository has been made read-only.

The security-tracker project has been shared with the Debian group so that
every DD has again commit access to the security-tracker.

Guest users unfortunately need to reapply. Please do so by replying to
this mail and we will add you to the project.

Regards,
Salvatore and Guido

Missing bug references for embedded-code-copies data

[Security Tracker]

https://bugs.debian.org/859589
--
The output might be a bit terse, but the above bugs are known to be
missing from the embedded-code-copies data.

DSA candidates

[Security Tracker]

exiv2
--
icu
--
libhibernate-validator-java
--
libraw
--
libvorbis
--
mercurial
--
mupdf
--
opencv
--
openexr
--
vlc
--
imagemagick/stable
--
mariadb-10.1/stable
--
thunderbird/stable
--
undertow/stable
--
php-horde-crypt/oldstable
--
python-werkzeug/oldstable
--
ruby-http/oldstable
--
--
The above is a list of DSA candidates based on the tracker's information.
One should evaluate the candidates and either add them to dsa-needed.txt
or consider tagging them no-dsa.

Re: DST down ?

[Fried Wil]

Hi Guido,

Thanks for your quick reply.

Regards,

Wilfried

On Fri, Dec 29, 2017 at 8:51 PM, Guido Günther  wrote:
> Hi Fried,
> On Fri, Dec 29, 2017 at 08:30:47PM +0100, Fried Wil wrote:
>> Hi DST Team,
>>
>> How are you ? Hope you enjoyed and have some good time for Xmas.
>>
>> Is DST website in maintenance or something ? There is no list on all
>> releases [1]
>>
>> And I test some DST : not working [2][3] ; always "Not found".
>
> Please see
>
> https://salsa.debian.org/security-tracker-team/security-tracker
>
> Content is available again already.
> Cheers,
>  -- Guido
>
>>
>> Thanks in advance.
>>
>> Regards,
>>
>> [1] https://security-tracker.debian.org/tracker/status/release/stable
>> [2] https://security-tracker.debian.org/tracker/wireshark
>> [3] https://security-tracker.debian.org/tracker/CVE-2017-17934
>>
>> --
>> Wilfried Pascault
>> wilfried.pasca...@gmail.com
>>



-- 
Wilfried Pascault
+1 514 430 7201
wilfried.pasca...@gmail.com

Re: DST down ?

[Guido Günther]

Hi Fried,
On Fri, Dec 29, 2017 at 08:30:47PM +0100, Fried Wil wrote:
> Hi DST Team,
> 
> How are you ? Hope you enjoyed and have some good time for Xmas.
> 
> Is DST website in maintenance or something ? There is no list on all
> releases [1]
> 
> And I test some DST : not working [2][3] ; always "Not found".

Please see

https://salsa.debian.org/security-tracker-team/security-tracker

Content is available again already.
Cheers,
 -- Guido

> 
> Thanks in advance.
> 
> Regards,
> 
> [1] https://security-tracker.debian.org/tracker/status/release/stable
> [2] https://security-tracker.debian.org/tracker/wireshark
> [3] https://security-tracker.debian.org/tracker/CVE-2017-17934
> 
> -- 
> Wilfried Pascault
> wilfried.pasca...@gmail.com
> 

DST down ?

[Fried Wil]

Hi DST Team,

How are you ? Hope you enjoyed and have some good time for Xmas.

Is DST website in maintenance or something ? There is no list on all
releases [1]

And I test some DST : not working [2][3] ; always "Not found".

Thanks in advance.

Regards,

[1] https://security-tracker.debian.org/tracker/status/release/stable
[2] https://security-tracker.debian.org/tracker/wireshark
[3] https://security-tracker.debian.org/tracker/CVE-2017-17934

-- 
Wilfried Pascault
wilfried.pasca...@gmail.com

Migrating secure-testing svn repository to git (security-tracker)

[Salvatore Bonaccorso]

Hi

Around 19:30:00 UTC, 2017-12-29 Guido and I are planning to switch the
svn repository to a git repository on the salsa service. 

Please do not push unneeded changes until the switch has happened to
facilitate the switch (but not absolutely needed if you have to).

Please expect that some automatic updates will not work immediately,
we instantiate those as soon as possible.

Regards,
Guido and Salvatore