[Git][security-tracker-team/security-tracker][master] 2 commits: Add fixing version for CVE-2018-10119

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1633c0ac by Salvatore Bonaccorso at 2018-04-19T09:50:25+02:00 Add fixing version for CVE-2018-10119 - - - - - 6feb2bfb by Salvatore Bonaccorso at 2018-04-19T09:51:16+02:00 Add fixing version for

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: bb11c0b5 by Moritz Muehlenhoff at 2018-04-19T11:52:00+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-10194/ghostscript

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 48bd6ce2 by Salvatore Bonaccorso at 2018-04-19T09:33:54+02:00 Add CVE-2018-10194/ghostscript - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 06cb5872 by Moritz Muehlenhoff at 2018-04-19T11:07:23+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-1107

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2dff4c55 by Salvatore Bonaccorso at 2018-04-19T08:22:11+02:00 Add CVE-2018-1107 - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] add libreoffice upstream advisories

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 596efb57 by Moritz Muehlenhoff at 2018-04-19T09:40:54+02:00 add libreoffice upstream advisories - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 92a23537 by Moritz Muehlenhoff at 2018-04-19T11:40:41+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Fix small typo

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c396ed77 by Salvatore Bonaccorso at 2018-04-19T12:12:15+02:00 Fix small typo - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c3fbfcff by security tracker role at 2018-04-19T08:10:34+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] new radare2 issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 4bd2248f by Moritz Muehlenhoff at 2018-04-19T12:17:42+02:00 new radare2 issues - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] CVE-2018-9846: Record fixes for release-1.2 branch

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2fe7df10 by Salvatore Bonaccorso at 2018-04-20T05:19:54+02:00 CVE-2018-9846: Record fixes for release-1.2 branch - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update dla-needed tiff entry

still investigating the issue before I mark them not-affected. + NOTE: 20180419: CVE-2018-8905 not reproducible in Wheezy/Jessie/Stretch (Buster only), + NOTE: but affected code seems to be present. I'm investigating the issue and will try + NOTE: to submit a patch asap. Please refer to bug

[Git][security-tracker-team/security-tracker][master] Two mruby issues fixed in unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: cf080ca5 by Salvatore Bonaccorso at 2018-04-20T05:28:44+02:00 Two mruby issues fixed in unstable - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add ghostscript to dsa-needed list

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 368c2fa7 by Salvatore Bonaccorso at 2018-04-20T04:55:44+02:00 Add ghostscript to dsa-needed list - - - - - 1 changed file: - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] claim libvorbis

Antoine Beaupré pushed to branch master at Debian Security Tracker / security-tracker Commits: 9946bf2e by Antoine Beaupré at 2018-04-19T11:11:15-04:00 claim libvorbis - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt

[Git][security-tracker-team/security-tracker][master] Move end-of-life tagged entry to suite entry

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7c311680 by Salvatore Bonaccorso at 2018-04-19T20:28:20+02:00 Move end-of-life tagged entry to suite entry - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] CVE-2014-5313,movabletype-opensource: end-of-life

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: b39e6336 by Markus Koschany at 2018-04-19T20:00:19+02:00 CVE-2014-5313,movabletype-opensource: end-of-life - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] virtualbox 5.2.10 adressing CVEs from April Oracle CPU

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3b32a55c by Salvatore Bonaccorso at 2018-04-19T20:47:49+02:00 virtualbox 5.2.10 adressing CVEs from April Oracle CPU - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add cacti to dla-needed.txt

-needed.txt = --- a/data/dla-needed.txt +++ b/data/dla-needed.txt @@ -12,6 +12,10 @@ https://wiki.debian.org/LTS/Development#Triage_new_security_issues -- apache2 (Roberto C. Sánchez) -- +cacti + NOTE: 20180419: Only few commits apply to the Wheezy version so

[Git][security-tracker-team/security-tracker][master] Reserve DLA-1355-1 for mysql-5.5

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 5dfec1c1 by Emilio Pozuelo Monfort at 2018-04-19T19:25:46+02:00 Reserve DLA-1355-1 for mysql-5.5 - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] CVE-2018-10187,CVE-2018-10186,radare2: Mark as no-dsa for Wheezy.

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 77923317 by Markus Koschany at 2018-04-19T19:01:48+02:00 CVE-2018-10187,CVE-2018-10186,radare2: Mark as no-dsa for Wheezy. Upstream states that CVE-2018-10186 is not exploitable. The POC for

[Git][security-tracker-team/security-tracker][master] clarify the issue behind CVE-2017-11735

Antoine Beaupré pushed to branch master at Debian Security Tracker / security-tracker Commits: dc5a98f6 by Antoine Beaupré at 2018-04-19T12:18:07-04:00 clarify the issue behind CVE-2017-11735 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 3f842d38 by Moritz Muehlenhoff at 2018-04-19T21:12:34+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-10188/phpmyadmin

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a938835a by Salvatore Bonaccorso at 2018-04-19T22:38:27+02:00 Add CVE-2018-10188/phpmyadmin - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Update information for CVE-2017-2826

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 19345e85 by Salvatore Bonaccorso at 2018-04-19T21:09:08+02:00 Update information for CVE-2017-2826 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c2e1616e by security tracker role at 2018-04-19T20:10:27+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Correct reference for CVE-2017-2825

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6c7032c4 by Salvatore Bonaccorso at 2018-04-19T21:31:07+02:00 Correct reference for CVE-2017-2825 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Reserve DLA-1356-1 for libreoffice

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: e405f81c by Emilio Pozuelo Monfort at 2018-04-19T23:00:14+02:00 Reserve DLA-1356-1 for libreoffice - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add bug number for CVE-2018-1088

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: acc2a4c8 by Markus Koschany at 2018-04-19T23:09:48+02:00 Add bug number for CVE-2018-1088 - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add note for CVE-2018-10186

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6c98bb3e by Salvatore Bonaccorso at 2018-04-19T23:11:59+02:00 Add note for CVE-2018-10186 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Reference fix for CVE-2016-10317

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 40dba3e2 by Salvatore Bonaccorso at 2018-04-19T23:42:11+02:00 Reference fix for CVE-2016-10317 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] CVE-2018-1088,glusterfs: reference upstream fixes.

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 25b0e35c by Markus Koschany at 2018-04-19T23:04:37+02:00 CVE-2018-1088,glusterfs: reference upstream fixes. - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add glusterfs to dla-needed.txt

-needed.txt = --- a/data/dla-needed.txt +++ b/data/dla-needed.txt @@ -37,6 +37,10 @@ gcc-4.9 (Roberto C. Sánchez, Ben Hutchings) -- ghostscript (Markus Koschany) -- +glusterfs + NOTE: 20180419: Maintainer not contacted yet because issue is too new. Patch