[Git][security-tracker-team/security-tracker][master] Move severity for CVE-2019-18348 to unimportant

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 59d47a06 by Salvatore Bonaccorso at 2019-10-26T15:27:16Z Move severity for CVE-2019-18348 to unimportant Technically the issue is sourcewise unfixed in the python source code, but it is made

[Git][security-tracker-team/security-tracker][master] 2 commits: Add prefix for easier grepping trough the file

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9fe616b9 by Salvatore Bonaccorso at 2019-10-26T15:27:49Z Add prefix for easier grepping trough the file - - - - - 29a5dec1 by Salvatore Bonaccorso at 2019-10-26T15:28:14Z Cleanup trailing

[Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2019-17400/unoconv

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8c5ad905 by Salvatore Bonaccorso at 2019-10-26T16:14:36Z Add fixed version for CVE-2019-17400/unoconv - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] add libssh

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: 975be77c by Thorsten Alteholz at 2019-10-26T17:30:16Z add libssh - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt

[Git][security-tracker-team/security-tracker][master] claim angular.js

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: 63c4e7f0 by Thorsten Alteholz at 2019-10-26T18:04:08Z claim angular.js - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 49e27066 by security tracker role at 2019-10-26T08:10:12Z automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Reference upstream pull request for CVE-2019-17400/unoconv

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e5942e50 by Salvatore Bonaccorso at 2019-10-26T14:31:30Z Reference upstream pull request for CVE-2019-17400/unoconv - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] new thunderbird issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 7aeafe71 by Moritz Muehlenhoff at 2019-10-26T14:48:17Z new thunderbird issues - - - - - 2 changed files: - data/CVE/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-17498/libssh2

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4198845c by Salvatore Bonaccorso at 2019-10-26T15:01:45Z Add Debian bug reference for CVE-2019-17498/libssh2 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] CVE-2019-18224/libidn2 fixed in unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6b75f1c9 by Salvatore Bonaccorso at 2019-10-26T13:59:41Z CVE-2019-18224/libidn2 fixed in unstable - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add Debian BTS reference for CVE-2019-14862/node-knockout

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: cf09596e by Salvatore Bonaccorso at 2019-10-26T14:38:51Z Add Debian BTS reference for CVE-2019-14862/node-knockout - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Correct source package name for CVE-2019-17498/libssh2

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 85aa4dbb by Salvatore Bonaccorso at 2019-10-26T14:36:39Z Correct source package name for CVE-2019-17498/libssh2 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Adjust mfsa2019-34 reference for CVE-2019-15903

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7b0cafa9 by Salvatore Bonaccorso at 2019-10-26T14:52:26Z Adjust mfsa2019-34 reference for CVE-2019-15903 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Reference upstream issue for CVE-2019-14368/exiv2

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d2344f70 by Salvatore Bonaccorso at 2019-10-26T13:42:49Z Reference upstream issue for CVE-2019-14368/exiv2 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update notes for CVE-2019-14368/exiv2

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: abcd624d by Salvatore Bonaccorso at 2019-10-26T13:54:07Z Update notes for CVE-2019-14368/exiv2 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Update status for CVE-2019-14863/angular.js

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9f38e995 by Salvatore Bonaccorso at 2019-10-26T14:08:43Z Update status for CVE-2019-14863/angular.js - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add fixed version CVE-2019-15587/ruby-loofah

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e9aa2fbf by Salvatore Bonaccorso at 2019-10-26T14:56:36Z Add fixed version CVE-2019-15587/ruby-loofah - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-12415/libapache-poi-java

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 44818bff by Salvatore Bonaccorso at 2019-10-26T15:08:04Z Add Debian bug reference for CVE-2019-12415/libapache-poi-java - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 6ace6e38 by Moritz Muehlenhoff at 2019-10-26T10:50:37Z NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Sync fixed version for CVE-2019-2215/linux with kernel-sec

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7b61654a by Salvatore Bonaccorso at 2019-10-26T13:22:26Z Sync fixed version for CVE-2019-2215/linux with kernel-sec - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] CVE-2019-18224/libidn2: Remove stretch and jessie entries

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6f590989 by Salvatore Bonaccorso at 2019-10-26T14:05:53Z CVE-2019-18224/libidn2: Remove stretch and jessie entries There is no src:libidn2 in stretch and jessie, remove the source entries for

[Git][security-tracker-team/security-tracker][master] Add fixed version via unstable for CVE-2019-14863/angular.js

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 329a96f0 by Salvatore Bonaccorso at 2019-10-26T14:15:00Z Add fixed version via unstable for CVE-2019-14863/angular.js - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add upstream issue reference for CVE-2019-15587/ruby-loofah

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9154a1c0 by Salvatore Bonaccorso at 2019-10-26T14:54:35Z Add upstream issue reference for CVE-2019-15587/ruby-loofah - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] 2 commits: dla: claim php5

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker Commits: 86e5ffe2 by Sylvain Beucler at 2019-10-26T15:10:01Z dla: claim php5 - - - - - c4ac061b by Sylvain Beucler at 2019-10-26T15:10:01Z Reserve DLA-1970-1 for php5 - - - - - 1 changed file: -

[Git][security-tracker-team/security-tracker][master] Reserve DLA-1971-1 for libarchive

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: 646b42db by Thorsten Alteholz at 2019-10-26T21:24:53Z Reserve DLA-1971-1 for libarchive - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] 2 commits: some DLAs will be fixed in next upload

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: 22d61e17 by Thorsten Alteholz at 2019-10-26T21:30:40Z some DLAs will be fixed in next upload - - - - - d675f98b by Thorsten Alteholz at 2019-10-26T21:31:31Z Reserve DLA-1972-1 for mosquitto - -

[Git][security-tracker-team/security-tracker][master] Add CVE-2019-2974 for MariaDB as well

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 472698e9 by Salvatore Bonaccorso at 2019-10-26T22:04:35Z Add CVE-2019-2974 for MariaDB as well MariaDB is similarly to Oracle slightly intransparent in their updates. Trying to catch up with

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6dd4b640 by security tracker role at 2019-10-26T20:10:17Z automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add fixed versions in unstable for CVE-2019-18281

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: de95fcc3 by Salvatore Bonaccorso at 2019-10-26T22:17:58Z Add fixed versions in unstable for CVE-2019-18281 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim libssh2

Abhijith PA pushed to branch master at Debian Security Tracker / security-tracker Commits: 6b362976 by Abhijith PA at 2019-10-27T04:16:29Z data/dla-needed.txt: Claim libssh2 - - - - - 1 changed file: - data/dla-needed.txt Changes: =