[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage expat for jessie.

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: c23039bd by Chris Lamb at 2019-09-06T07:24:23Z data/dla-needed.txt: Triage expat for jessie. - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage poppler for jessie.

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: db86bdd9 by Chris Lamb at 2019-09-06T07:16:55Z data/dla-needed.txt: Triage poppler for jessie. - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim expat.

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: e11b7f9f by Chris Lamb at 2019-09-06T07:25:01Z data/dla-needed.txt: Claim expat. - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt

[Git][security-tracker-team/security-tracker][master] Add fixed version via unstable for CVE-2017-11472

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f668b5e2 by Salvatore Bonaccorso at 2019-09-06T08:29:49Z Add fixed version via unstable for CVE-2017-11472 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim poppler.

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: 30c27c46 by Chris Lamb at 2019-09-06T07:26:17Z data/dla-needed.txt: Claim poppler. - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt

[Git][security-tracker-team/security-tracker][master] Add fixed version via unstable for CVE-2017-9986

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: be3b00e4 by Salvatore Bonaccorso at 2019-09-06T08:32:57Z Add fixed version via unstable for CVE-2017-9986 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9f97f8a7 by Salvatore Bonaccorso at 2019-09-06T07:48:35Z Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2018-21010/openjpeg2

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a96c63e1 by Salvatore Bonaccorso at 2019-09-06T08:59:20Z Add Debian bug reference for CVE-2018-21010/openjpeg2 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add temporary entry for wordpress

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ffaed0e0 by Salvatore Bonaccorso at 2019-09-06T07:45:56Z Add temporary entry for wordpress Asking Craig Small for requests to CVEs for the individual entries. For now keep it for initial

[Git][security-tracker-team/security-tracker][master] Add CVE-2019-1594{5,6}/opensc

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3c587113 by Salvatore Bonaccorso at 2019-09-06T08:06:56Z Add CVE-2019-1594{5,6}/opensc - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b2dccb22 by Salvatore Bonaccorso at 2019-09-06T08:06:19Z Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Mark fixed version for CVE-2019-12615 in unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a1577874 by Salvatore Bonaccorso at 2019-09-06T08:27:27Z Mark fixed version for CVE-2019-12615 in unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update information for CVE-2019-15925/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c420a512 by Salvatore Bonaccorso at 2019-09-06T08:46:28Z Update information for CVE-2019-15925/linux - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Reserve DLA-1910-1 for firefox-esr

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 50216e38 by Emilio Pozuelo Monfort at 2019-09-06T08:53:12Z Reserve DLA-1910-1 for firefox-esr - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a49def56 by security tracker role at 2019-09-06T08:10:22Z automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Hand over exim4 DSA release to jmm

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b0122e50 by Salvatore Bonaccorso at 2019-09-06T08:09:11Z Hand over exim4 DSA release to jmm - - - - - 1 changed file: - data/dsa-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-21010/openjpeg2

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 56ed2a23 by Salvatore Bonaccorso at 2019-09-06T08:08:10Z Add CVE-2018-21010/openjpeg2 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Track fixed version sourcewise for CVE-2018-9465 in stretch

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6e6855d0 by Salvatore Bonaccorso at 2019-09-06T08:35:30Z Track fixed version sourcewise for CVE-2018-9465 in stretch - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update information for CVE-2019-15921

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: cd6ecec8 by Salvatore Bonaccorso at 2019-09-06T08:58:54Z Update information for CVE-2019-15921 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Annotate CVE-2019-2386/mongodb as ignored for jessie

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: 6422bf52 by Roberto C. Sánchez at 2019-09-06T14:05:07Z Annotate CVE-2019-2386/mongodb as ignored for jessie - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Reserve DLA-1912-1 for expat

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: 02de3023 by Chris Lamb at 2019-09-06T14:17:58Z Reserve DLA-1912-1 for expat - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Unclaim poppler for now; I forgot I still need to work on xtrlock...

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: 9bd0d33f by Chris Lamb at 2019-09-06T14:06:41Z Unclaim poppler for now; I forgot I still need to work on xtrlock... This reverts commit 30c27c46527aaa6db10c16a09e8b48bc20c03f8f. - - - - - 1 changed

[Git][security-tracker-team/security-tracker][master] 2 commits: LTS/mongodb, remove from dla-needed.txt as no open issues remain

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: 78319037 by Roberto C. Sánchez at 2019-09-06T14:11:59Z LTS/mongodb, remove from dla-needed.txt as no open issues remain - - - - - 6d88d146 by Roberto C. Sánchez at 2019-09-06T14:11:59Z LTS/claim

[Git][security-tracker-team/security-tracker][master] CVE-2019-12402/libcommons-compress-java add reference for upstream commit containing fix

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: 9bfdee4f by Roberto C. Sánchez at 2019-09-06T14:19:35Z CVE-2019-12402/libcommons-compress-java add reference for upstream commit containing fix - - - - - 1 changed file: - data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 73fcd32a by security tracker role at 2019-09-06T20:10:23Z automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Reserve DLA-1913-1 for memcachedb

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: 44ddfd92 by Chris Lamb at 2019-09-06T20:46:00Z Reserve DLA-1913-1 for memcachedb - - - - - 1 changed file: - data/DLA/list Changes: = data/DLA/list

[Git][security-tracker-team/security-tracker][master] new libreoffice issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: a4d1f0d0 by Moritz Muehlenhoff at 2019-09-06T23:05:42Z new libreoffice issues - - - - - 2 changed files: - data/CVE/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] CVE-2019-15026/memcached fixed in unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 90482f67 by Salvatore Bonaccorso at 2019-09-06T19:28:55Z CVE-2019-15026/memcached fixed in unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-12402

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e142b7d6 by Salvatore Bonaccorso at 2019-09-06T19:39:44Z Add Debian bug reference for CVE-2019-12402 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2019-15890/qemu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 475ba6fc by Salvatore Bonaccorso at 2019-09-06T19:36:11Z Add CVE-2019-15890/qemu - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Annotate CVE-2019-10217/ansible as not affecting jessie

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: c9e974c4 by Roberto C. Sánchez at 2019-09-06T11:51:46Z Annotate CVE-2019-10217/ansible as not affecting jessie - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] LTS/ansible status update

- NOTE: 20190828: the security team would not. + NOTE: 20190906: update is ready; sent request for testing to debian-lts@; intend to upload on 20190916 (roberto) -- cimg (Thorsten Alteholz) NOTE: inline function load_network_external is affected, variable filename View it on GitLab: https

[Git][security-tracker-team/security-tracker][master] wordpress fixed

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: e1d2a14a by Moritz Muehlenhoff at 2019-09-06T09:56:55Z wordpress fixed - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Reserve DLA-1911-1 for exim4

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: 4979f945 by Thorsten Alteholz at 2019-09-06T10:18:12Z Reserve DLA-1911-1 for exim4 - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add Exim upstream commit

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 8d658bdb by Moritz Muehlenhoff at 2019-09-06T10:50:15Z Add Exim upstream commit ffmpeg n/a NFUs - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] exim fixed in sid

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 24d94cc7 by Moritz Muehlenhoff at 2019-09-06T11:31:24Z exim fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] already commit forthcoming exim DSA

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 68f630ec by Moritz Muehlenhoff at 2019-09-06T09:54:29Z already commit forthcoming exim DSA - - - - - 2 changed files: - data/DSA/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] 2 commits: Annotate CVE-2019-12402/libcommons-compress-java as not affecting jessie

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: ac6143d3 by Roberto C. Sánchez at 2019-09-06T14:35:16Z Annotate CVE-2019-12402/libcommons-compress-java as not affecting jessie - - - - - a68cea00 by Roberto C. Sánchez at 2019-09-06T14:36:22Z

[Git][security-tracker-team/security-tracker][master] new bitcoin issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 46e03a01 by Moritz Muehlenhoff at 2019-09-06T15:38:56Z new bitcoin issue two older poppler issues NFUs - - - - - 1 changed file: - data/CVE/list Changes: