[Git][security-tracker-team/security-tracker][master] Four CVE affecting php7.0 fixed in unstable upload

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b3165b12 by Salvatore Bonaccorso at 2018-07-11T07:57:22+02:00 Four CVE affecting php7.0 fixed in unstable upload - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process CVE-2018-1331 (NFU)

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d8ec8fa7 by Salvatore Bonaccorso at 2018-07-11T07:42:58+02:00 Process CVE-2018-1331 (NFU) - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process CVE-2018-1337 as NFU

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 707d2dea by Salvatore Bonaccorso at 2018-07-11T07:41:57+02:00 Process CVE-2018-1337 as NFU - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Annotate CVE-2017-15238 as not affecting graphicsmagick in jessie

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: 33c39d3d by Roberto C. Sánchez at 2018-07-11T00:23:01-04:00 Annotate CVE-2017-15238 as not affecting graphicsmagick in jessie - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Mark CVE-2018-12520,ntopng as no-dsa for Jessie.

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 90bdc0b4 by Markus Koschany at 2018-07-11T00:20:42+02:00 Mark CVE-2018-12520,ntopng as no-dsa for Jessie. - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] CVE-2018-13419,libsndfile: no-dsa for Jessie

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 655f0a86 by Markus Koschany at 2018-07-10T23:28:23+02:00 CVE-2018-13419,libsndfile: no-dsa for Jessie Minor issue, follow Stretch. - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add git-annex to dla-needed.txt

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 4d074ed7 by Markus Koschany at 2018-07-10T23:26:47+02:00 Add git-annex to dla-needed.txt - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] htslib no-dsa

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: a7775c28 by Moritz Muehlenhoff at 2018-07-10T23:23:05+02:00 htslib no-dsa - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Mark CVEs fixed by ffmpeg 3.4.3 as fixed

Sebastian Ramacher pushed to branch master at Debian Security Tracker / security-tracker Commits: 19abeff6 by Sebastian Ramacher at 2018-07-10T22:50:43+02:00 Mark CVEs fixed by ffmpeg 3.4.3 as fixed - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Update status for CVE-2018-5873

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 562f26a4 by Salvatore Bonaccorso at 2018-07-10T22:50:19+02:00 Update status for CVE-2018-5873 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-13818/twig

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 528fce74 by Salvatore Bonaccorso at 2018-07-10T22:47:27+02:00 Add CVE-2018-13818/twig - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] 2 commits: Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8499926c by Salvatore Bonaccorso at 2018-07-10T22:38:11+02:00 Process NFUs - - - - - 79a7c148 by Salvatore Bonaccorso at 2018-07-10T22:38:12+02:00 Add three new htslib issues - - - - - 1

[Git][security-tracker-team/security-tracker][master] CVE-2018-13421,fast-cpp-csv-parser: no-dsa for Jessie

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: fb6568f4 by Markus Koschany at 2018-07-10T22:23:55+02:00 CVE-2018-13421,fast-cpp-csv-parser: no-dsa for Jessie Follow Stretch, also popcon is very low. - - - - - 1 changed file: - data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add cinnamon to dla-needed.txt

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 64d0f7b4 by Markus Koschany at 2018-07-10T22:20:40+02:00 Add cinnamon to dla-needed.txt - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Mark CVE-2018-10872 as not-affected for src:linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9cb24750 by Salvatore Bonaccorso at 2018-07-10T22:14:19+02:00 Mark CVE-2018-10872 as not-affected for src:linux The CVE-2018-10872 CVE assignment is specific to a Red Hat Enterprise Linux 6.10

[Git][security-tracker-team/security-tracker][master] Add bug reference for CVE-2018-10887

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8a127aeb by Salvatore Bonaccorso at 2018-07-10T22:12:04+02:00 Add bug reference for CVE-2018-10887 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c711b89a by security tracker role at 2018-07-10T20:10:20+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add bug reference for CVE-2018-10888

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 369928cd by Salvatore Bonaccorso at 2018-07-10T22:07:08+02:00 Add bug reference for CVE-2018-10888 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6d7f7eca by Salvatore Bonaccorso at 2018-07-10T21:41:57+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Reference commits for all affected branches for ruby-sprockets

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: cd729731 by Salvatore Bonaccorso at 2018-07-10T21:32:35+02:00 Reference commits for all affected branches for ruby-sprockets Add commits for master, 3.x (3.7.2) and 2.x (2.12.5) series. - - - -

[Git][security-tracker-team/security-tracker][master] Add bug reference for CVE-2018-10850/389-ds-base

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 89d730a2 by Salvatore Bonaccorso at 2018-07-10T21:22:27+02:00 Add bug reference for CVE-2018-10850/389-ds-base - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add bug reference for CVE-2018-13440/audiofile

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c7045b86 by Salvatore Bonaccorso at 2018-07-10T21:15:40+02:00 Add bug reference for CVE-2018-13440/audiofile - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] CVE-2018-1000532,beep: Minor issue, follow Stretch

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 6204f2db by Markus Koschany at 2018-07-10T21:07:13+02:00 CVE-2018-1000532,beep: Minor issue, follow Stretch - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] CVE-2018-13440,audiofile: Minor issue

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 8e50b9a0 by Markus Koschany at 2018-07-10T20:48:45+02:00 CVE-2018-13440,audiofile: Minor issue - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] CVE-2018-3760,ruby-sprockets. Jessie is not affected

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: d407d07f by Markus Koschany at 2018-07-10T19:05:15+02:00 CVE-2018-3760,ruby-sprockets. Jessie is not affected Vulnerable code is not present. - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Claim mailman in dla-needed.txt

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 2968ce51 by Markus Koschany at 2018-07-10T18:59:17+02:00 Claim mailman in dla-needed.txt - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Update bug and commit references for CVE-2018-10850

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7b6ea77b by Salvatore Bonaccorso at 2018-07-10T16:56:19+02:00 Update bug and commit references for CVE-2018-10850 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] 2 commits: mark CVE-2017-2668 as not-affected for Jessie

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: d52067d9 by Thorsten Alteholz at 2018-07-10T15:35:10+02:00 mark CVE-2017-2668 as not-affected for Jessie - - - - - 3d95ba04 by Thorsten Alteholz at 2018-07-10T15:54:37+02:00 mark CVE-2017-7551 as

[Git][security-tracker-team/security-tracker][master] 3 commits: mark CVE-2016-5405 as no-dsa for Jessie

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: e079c03d by Thorsten Alteholz at 2018-07-10T15:14:17+02:00 mark CVE-2016-5405 as no-dsa for Jessie - - - - - ef7c97a1 by Thorsten Alteholz at 2018-07-10T15:14:17+02:00 add fix for CVE-2017-15134 -

[Git][security-tracker-team/security-tracker][master] claim libspring-java

Abhijith PA pushed to branch master at Debian Security Tracker / security-tracker Commits: 993e0d39 by Abhijith PA at 2018-07-10T17:58:53+05:30 claim libspring-java - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt

[Git][security-tracker-team/security-tracker][master] mark CVE-2015-3230 as not-affected for Jessie

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: 88d62c36 by Thorsten Alteholz at 2018-07-10T14:21:25+02:00 mark CVE-2015-3230 as not-affected for Jessie - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-13797/node-macaddress

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b095302d by Salvatore Bonaccorso at 2018-07-10T13:58:22+02:00 Add CVE-2018-13797/node-macaddress - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] CVE-2018-13785/libpng1.6 fixed in unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d51b55d4 by Salvatore Bonaccorso at 2018-07-10T13:57:23+02:00 CVE-2018-13785/libpng1.6 fixed in unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] CVE-2018-8945/binutils fixed

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: fdbfd669 by Salvatore Bonaccorso at 2018-07-10T13:55:10+02:00 CVE-2018-8945/binutils fixed - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] new node-macaddress issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 5d8ddfc1 by Moritz Muehlenhoff at 2018-07-10T11:32:14+02:00 new node-macaddress issue one ntp bug ref - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Cleanup trailing whitespaces

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 45ded167 by Salvatore Bonaccorso at 2018-07-10T10:54:03+02:00 Cleanup trailing whitespaces - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-1000613/bouncycastle

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4f62aaa6 by Salvatore Bonaccorso at 2018-07-10T10:44:57+02:00 Add CVE-2018-1000613/bouncycastle - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 95b95535 by security tracker role at 2018-07-10T08:10:11+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Claim sssd

Brian May pushed to branch master at Debian Security Tracker / security-tracker Commits: 9889b3eb by Brian May at 2018-07-10T17:01:20+10:00 Claim sssd - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-1000622/rustc

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0a75e433 by Salvatore Bonaccorso at 2018-07-10T08:19:38+02:00 Add CVE-2018-1000622/rustc - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-10861/ceph

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6b97cf7b by Salvatore Bonaccorso at 2018-07-10T08:17:26+02:00 Add CVE-2018-10861/ceph - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-1088{7,8}/libgit2

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f58ae1c9 by Salvatore Bonaccorso at 2018-07-10T08:16:08+02:00 Add CVE-2018-1088{7,8}/libgit2 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Mark CVE-2018-10894 as NFU

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: fd14bbb1 by Salvatore Bonaccorso at 2018-07-10T08:14:11+02:00 Mark CVE-2018-10894 as NFU - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-1128/ceph

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5638e3b7 by Salvatore Bonaccorso at 2018-07-10T08:11:12+02:00 Add CVE-2018-1128/ceph - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-1129/ceph

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9b9c31bd by Salvatore Bonaccorso at 2018-07-10T08:09:47+02:00 Add CVE-2018-1129/ceph - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list