[Git][security-tracker-team/security-tracker][master] Add CVE-2018-19052/lighttpd

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1d56c4bb by Salvatore Bonaccorso at 2018-11-07T07:54:07Z Add CVE-2018-19052/lighttpd - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-10851/pdns

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 058b5b25 by Salvatore Bonaccorso at 2018-11-07T06:40:14Z Add CVE-2018-10851/pdns - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-10851/pdns-recursor

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 893ddc4a by Salvatore Bonaccorso at 2018-11-07T06:38:55Z Add CVE-2018-10851/pdns-recursor - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-14626/pdns

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a21285e4 by Salvatore Bonaccorso at 2018-11-07T06:36:52Z Add CVE-2018-14626/pdns - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-14626/pdns-recursor

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ff4d8343 by Salvatore Bonaccorso at 2018-11-07T06:33:33Z Add CVE-2018-14626/pdns-recursor - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-14644/pdns-recursor

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8ae63f69 by Salvatore Bonaccorso at 2018-11-07T06:31:24Z Add CVE-2018-14644/pdns-recursor - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add two entries related to amanda

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3de04d05 by Salvatore Bonaccorso at 2018-11-07T06:27:41Z Add two entries related to amanda - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-14667

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: fed3ac53 by Salvatore Bonaccorso at 2018-11-07T06:23:28Z Add CVE-2018-14667 - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Claim tiff

= @@ -101,7 +101,7 @@ systemd thunderbird (Emilio Pozuelo) NOTE: 20181106: needs rustc/cargo currently in NEW -- -tiff +tiff (Brian May) -- xen -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/b1c535230ba017fb37e4f15899a9080c4554762c

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-18954/qemu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d4b37aa2 by Salvatore Bonaccorso at 2018-11-07T05:40:32Z Add CVE-2018-18954/qemu - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process two new NFUs in Apache Syncope

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2e4bdf4d by Salvatore Bonaccorso at 2018-11-07T05:35:33Z Process two new NFUs in Apache Syncope - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] nginx fixes

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: b9a6f5a9 by Moritz Muehlenhoff at 2018-11-06T22:47:30Z nginx fixes - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add bug reference for CVE-2018-18778

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 92a669e7 by Salvatore Bonaccorso at 2018-11-06T21:40:38Z Add bug reference for CVE-2018-18778 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 620dab8e by Salvatore Bonaccorso at 2018-11-06T21:26:20Z Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add bug reference for CVE-2014-10077/ruby-i18n

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 675547d6 by Salvatore Bonaccorso at 2018-11-06T21:16:24Z Add bug reference for CVE-2014-10077/ruby-i18n - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process two IBM NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d287134c by Salvatore Bonaccorso at 2018-11-06T20:56:58Z Process two IBM NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2014-10077/ruby-i18n

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9c0c1a27 by Salvatore Bonaccorso at 2018-11-06T20:44:24Z Add CVE-2014-10077/ruby-i18n - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add bug reference for CVE-2018-1684{3,4,5}/nginx

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: de848aa9 by Salvatore Bonaccorso at 2018-11-06T20:31:27Z Add bug reference for CVE-2018-1684{3,4,5}/nginx - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add short descriptions for nginx issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 019602f5 by Salvatore Bonaccorso at 2018-11-06T20:23:11Z Add short descriptions for nginx issues - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Update commit for CVE-2018-14660/glusterfs (still under review upstream)

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b2501b0d by Salvatore Bonaccorso at 2018-11-06T20:15:56Z Update commit for CVE-2018-14660/glusterfs (still under review upstream) - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 09c15896 by security tracker role at 2018-11-06T20:10:26Z automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] CVE-2018-14652/glusterfs fixed in unstable with 5.0-1 upload

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: bfe52d0b by Salvatore Bonaccorso at 2018-11-06T20:06:53Z CVE-2018-14652/glusterfs fixed in unstable with 5.0-1 upload The vulnerability fix is just a part of the whole upstream change which

[Git][security-tracker-team/security-tracker][master] Update commit references for CVE-2018-14654/glusterfs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3750373c by Salvatore Bonaccorso at 2018-11-06T20:04:36Z Update commit references for CVE-2018-14654/glusterfs - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] dla: take mariadb

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 378d0929 by Emilio Pozuelo Monfort at 2018-11-06T19:47:10Z dla: take mariadb - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] new nginx issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: b1e3ebca by Moritz Muehlenhoff at 2018-11-06T19:38:30Z new nginx issues - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] 2 commits: Claim jasper in dla-needed.txt

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: c256dd46 by Markus Koschany at 2018-11-06T18:32:03Z Claim jasper in dla-needed.txt - - - - - 6f5856fa by Markus Koschany at 2018-11-06T18:33:45Z Merge branch master of

[Git][security-tracker-team/security-tracker][master] 2 commits: Reorder listing for contact adresses

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e16c4f86 by Salvatore Bonaccorso at 2018-11-06T18:14:17Z Reorder listing for contact adresses - - - - - 1bd5c13f by Salvatore Bonaccorso at 2018-11-06T18:15:11Z Add warning note - - - - - 1

[Git][security-tracker-team/security-tracker][master] Three curl CVEs were adressed in recent DLA

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4b5a6165 by Salvatore Bonaccorso at 2018-11-06T18:08:34Z Three curl CVEs were adressed in recent DLA - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Reserve DLA-1568-1 for curl

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 98da9693 by Markus Koschany at 2018-11-06T18:04:06Z Reserve DLA-1568-1 for curl - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Claim squid3 in dla-needed.txt

Abhijith PA pushed to branch master at Debian Security Tracker / security-tracker Commits: 1ed38e87 by Abhijith PA at 2018-11-06T16:59:30Z Claim squid3 in dla-needed.txt - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt

[Git][security-tracker-team/security-tracker][master] Add missing CVE ID for Chromium

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 43264cf2 by Moritz Muehlenhoff at 2018-11-06T16:39:07Z Add missing CVE ID for Chromium One poppler issue ignored - - - - - 2 changed files: - data/CVE/list - data/DSA/list Changes:

[Git][security-tracker-team/security-tracker][master] dla: take thunderbird

-needed.txt = @@ -102,7 +102,8 @@ systemd NOTE: 20181101: I recommend to fix all open issues including the postponed NOTE: ones, too. (apo) -- -thunderbird +thunderbird (Emilio Pozuelo) + NOTE: 20181106: needs rustc/cargo currently in NEW -- tiff

[Git][security-tracker-team/security-tracker][master] Add poppler fix

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 17c991f7 by Moritz Muehlenhoff at 2018-11-06T16:16:22Z Add poppler fix - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add and claim icu

= @@ -32,6 +32,8 @@ firmware-nonfree (Ben Hutchings) icecast2 (Abhijith PA) NOTE: 20181106: please upload https://git.fosscommunity.in/bhe/patches/raw/master/icecast2_deb8u2.debdiff -- +icu (Roberto C. Sánchez) +-- imagemagick (Thorsten Alteholz) NOTE

[Git][security-tracker-team/security-tracker][master] LTS/claim openssl

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: 6c138db0 by Roberto C. Sánchez at 2018-11-06T12:20:13Z LTS/claim openssl - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-18956/suricata

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a216d66b by Salvatore Bonaccorso at 2018-11-06T10:00:08Z Add CVE-2018-18956/suricata - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add note to icecast2 in dla-needed.txt

-needed.txt = @@ -30,6 +30,7 @@ firmware-nonfree (Ben Hutchings) NOTE: Waiting for approval of Stretch update. -- icecast2 (Abhijith PA) + NOTE: 20181106: please upload https://git.fosscommunity.in/bhe/patches/raw/master/icecast2_deb8u2.debdiff -- imagemagick

[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c4a17fa4 by Salvatore Bonaccorso at 2018-11-06T08:34:04Z Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 530f8354 by security tracker role at 2018-11-06T08:10:16Z automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list