[Git][security-tracker-team/security-tracker][master] Add CVE-2018-0108{69,70} as NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c4a50966 by Salvatore Bonaccorso at 2018-07-20T07:14:36+02:00 Add CVE-2018-0108{69,70} as NFUs - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Record bug for mysql-5.7 issues: #904121

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 25aa17aa by Salvatore Bonaccorso at 2018-07-20T07:04:07+02:00 Record bug for mysql-5.7 issues: #904121 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add bug reference for CVE-2018-11490/giflib

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: dbcc8eaf by Salvatore Bonaccorso at 2018-07-20T05:57:56+02:00 Add bug reference for CVE-2018-11490/giflib - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add bug reference for CVE-2018-11489/giflib

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 55cb6fea by Salvatore Bonaccorso at 2018-07-20T05:55:29+02:00 Add bug reference for CVE-2018-11489/giflib - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Reserve DLA-1434-1 for linux-base

Ben Hutchings pushed to branch master at Debian Security Tracker / security-tracker Commits: 45d2f888 by Ben Hutchings at 2018-07-20T03:02:43+01:00 Reserve DLA-1434-1 for linux-base - - - - - 1 changed file: - data/DLA/list Changes: = data/DLA/list

[Git][security-tracker-team/security-tracker][master] Add bug reference for CVE-2018-2598

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 70da52a2 by Salvatore Bonaccorso at 2018-07-19T23:26:41+02:00 Add bug reference for CVE-2018-2598 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] symfony triage

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 8da68794 by Moritz Muehlenhoff at 2018-07-19T23:17:49+02:00 symfony triage - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Claim intel-microcode in dla-needed.txt

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 796ad3b0 by Markus Koschany at 2018-07-19T23:14:20+02:00 Claim intel-microcode in dla-needed.txt - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] clementine non-issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 69bbd0bb by Moritz Muehlenhoff at 2018-07-19T22:53:06+02:00 clementine non-issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] 2 commits: Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9859ef22 by Salvatore Bonaccorso at 2018-07-19T22:36:38+02:00 Process NFUs - - - - - 8286abdc by Salvatore Bonaccorso at 2018-07-19T22:37:15+02:00 Merge remote-tracking branch origin/master - -

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-14332/clementine

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6f48154d by Salvatore Bonaccorso at 2018-07-19T22:37:32+02:00 Add CVE-2018-14332/clementine - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] readd openjpeg2

= --- a/data/dla-needed.txt +++ b/data/dla-needed.txt @@ -97,6 +97,9 @@ opencv (Thorsten Alteholz) -- openjdk-7 (Emilio Pozuelo) -- +openjpeg2 + NOTE: 20180719: there is no patch available for the remaining CVEs +-- phpldapadmin -- policykit-1 (Abhijith PA

[Git][security-tracker-team/security-tracker][master] Reserve DLA-1433-1 for openjpeg2

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: 3978b6ab by Thorsten Alteholz at 2018-07-19T22:27:05+02:00 Reserve DLA-1433-1 for openjpeg2 - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Mark CVE-2018-14404/libxml2 as no-dsa

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: dcd3c02e by Salvatore Bonaccorso at 2018-07-19T22:22:07+02:00 Mark CVE-2018-14404/libxml2 as no-dsa - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add information for CVE-2018-14404/libxml2

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: efaed7ec by Salvatore Bonaccorso at 2018-07-19T22:18:34+02:00 Add information for CVE-2018-14404/libxml2 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4cba37bb by Salvatore Bonaccorso at 2018-07-19T22:15:54+02:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 90fa4009 by security tracker role at 2018-07-19T20:10:18+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Update information for CVE-2018-1333/apache2

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b06a4e5e by Salvatore Bonaccorso at 2018-07-19T21:53:51+02:00 Update information for CVE-2018-1333/apache2 Mark apache2 in jessie as not-affected, HTTP/2 support introducer in 2.4.17 only. - -

[Git][security-tracker-team/security-tracker][master] Mark CVE-2018-1333/apache2 as no-dsa for stretch

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1c8364f2 by Salvatore Bonaccorso at 2018-07-19T21:47:00+02:00 Mark CVE-2018-1333/apache2 as no-dsa for stretch - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add bug reference for CVE-2018-1333/apache2

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 94f489f4 by Salvatore Bonaccorso at 2018-07-19T21:39:30+02:00 Add bug reference for CVE-2018-1333/apache2 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2017-1002153/koji

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 20b62d06 by Salvatore Bonaccorso at 2018-07-19T21:38:28+02:00 Add fixed version for CVE-2017-1002153/koji - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add bug reference for CVE-2018-8011/apache2

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e80b59e4 by Salvatore Bonaccorso at 2018-07-19T21:34:16+02:00 Add bug reference for CVE-2018-8011/apache2 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Mark CVE-2018-8011/apache2 as not-affected for stretch

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1087a3e4 by Salvatore Bonaccorso at 2018-07-19T21:33:10+02:00 Mark CVE-2018-8011/apache2 as not-affected for stretch - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Whitespace cleanups

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a487a8c4 by Salvatore Bonaccorso at 2018-07-19T20:21:41+02:00 Whitespace cleanups - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-8018 as NFU

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f0b1830e by Salvatore Bonaccorso at 2018-07-19T20:21:08+02:00 Add CVE-2018-8018 as NFU - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] two wireshark issues n/a

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: c5ea8656 by Moritz Muehlenhoff at 2018-07-19T17:02:12+02:00 two wireshark issues n/a - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Remove libtomcrypt from dla-needed.txt. Mark CVE-2018-0739 as for…

Mike Gabriel pushed to branch master at Debian Security Tracker / security-tracker Commits: 74903970 by Mike Gabriel at 2018-07-19T16:28:40+02:00 Remove libtomcrypt from dla-needed.txt. Mark CVE-2018-0739 as no-das for [jessie]. Following the security teams decision on this. - - - - - 2

[Git][security-tracker-team/security-tracker][master] Removing yum-utils from dla-needed.txt again, marking CVE-2018-10897 as for jessie.

Mike Gabriel pushed to branch master at Debian Security Tracker / security-tracker Commits: cffbfc4d by Mike Gabriel at 2018-07-19T16:22:26+02:00 Removing yum-utils from dla-needed.txt again, marking CVE-2018-10897 as ignored for jessie. - - - - - 2 changed files: - data/CVE/list -

[Git][security-tracker-team/security-tracker][master] Add sam2p to dla-needed.txt.

Mike Gabriel pushed to branch master at Debian Security Tracker / security-tracker Commits: 8a1cbf6a by Mike Gabriel at 2018-07-19T15:19:11+02:00 Add sam2p to dla-needed.txt. Comment: The sam2p got removed from unstable because of, so said, dead upstream. Obviously, there is activity on

[Git][security-tracker-team/security-tracker][master] Add mutt to dla-needed.txt.

Mike Gabriel pushed to branch master at Debian Security Tracker / security-tracker Commits: 1e4aabca by Mike Gabriel at 2018-07-19T15:16:35+02:00 Add mutt to dla-needed.txt. - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt

[Git][security-tracker-team/security-tracker][master] data/CVE/list: Tag CVE-2018-10903 (python-cryptography) as not affecting jessie.…

Mike Gabriel pushed to branch master at Debian Security Tracker / security-tracker Commits: 87575f1c by Mike Gabriel at 2018-07-19T15:11:14+02:00 data/CVE/list: Tag CVE-2018-10903 (python-cryptography) as not affecting jessie. Vulnerable code was added post-2.0 release. - - - - - 1 changed

[Git][security-tracker-team/security-tracker][master] add wireshark

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: 54d6333f by Thorsten Alteholz at 2018-07-19T13:52:40+02:00 add wireshark - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt

[Git][security-tracker-team/security-tracker][master] ffmpeg triage

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 9c5f20fd by Moritz Muehlenhoff at 2018-07-19T11:03:52+02:00 ffmpeg triage - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] dla: take mysql-5.5 and openjdk-7

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 564936ad by Emilio Pozuelo Monfort at 2018-07-19T11:02:18+02:00 dla: take mysql-5.5 and openjdk-7 - - - - - 1 changed file: - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add new set of wireshark issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a6afe1de by Salvatore Bonaccorso at 2018-07-19T10:41:52+02:00 Add new set of wireshark issues - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-1439{4,5}/ffmpeg

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0a09a11f by Salvatore Bonaccorso at 2018-07-19T10:32:58+02:00 Add CVE-2018-1439{4,5}/ffmpeg - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: dfaaf364 by Salvatore Bonaccorso at 2018-07-19T10:30:04+02:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-14403/mp4v2

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c0aef6f7 by Salvatore Bonaccorso at 2018-07-19T10:22:08+02:00 Add CVE-2018-14403/mp4v2 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Mark CVE-2018-10903/python-cryptography as not affecting stretch

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b91adc6c by Salvatore Bonaccorso at 2018-07-19T08:44:55+02:00 Mark CVE-2018-10903/python-cryptography as not affecting stretch - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-10903/python-cryptography

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 951a4e99 by Salvatore Bonaccorso at 2018-07-19T08:38:31+02:00 Add CVE-2018-10903/python-cryptography - - - - - 1 changed file: - data/CVE/list Changes: