[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage sqlite3 for stretch LTS.

2020-07-12 Thread Chris Lamb
: = data/dla-needed.txt = @@ -153,6 +153,9 @@ salt samba (Roberto C. Sánchez) NOTE: 20200703: Check with security team so that there's no clash for Stretch update. (utkarsh) -- +sqlite3 + NOTE: 20200712: Vulnerable to at least CVE-2020-13630. (lamby

[Git][security-tracker-team/security-tracker][master] LTS: update condor notes

2020-07-12 Thread Roberto C . Sánchez
) NOTE: 20200627: Updates prepared (for jessie/stretch/buster); coordinating with security team for testing (roberto) + NOTE: 20200712: Requested input on path forward from debian-lts@l.d.o (roberto) -- curl (Thorsten Alteholz) -- View it on GitLab: https://salsa.debian.org/security

[Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2020-14040/golang-golang-x-text

2020-07-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 14b72c1e by Salvatore Bonaccorso at 2020-07-12T15:04:33+02:00 Add fixed version for CVE-2020-14040/golang-golang-x-text - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add information on CVE-2020-4054/ruby-sanitize

2020-07-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: af8064bd by Salvatore Bonaccorso at 2020-07-12T12:51:15+02:00 Add information on CVE-2020-4054/ruby-sanitize - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] unsupported_packages.py: Update LTS version to 8.

2020-07-12 Thread Chris Lamb
Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: 7ffe93ed by Chris Lamb at 2020-07-12T12:48:22+01:00 unsupported_packages.py: Update LTS version to 8. - - - - - 1 changed file: - bin/unsupported_packages.py Changes:

[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage ksh for stretch LTS.

2020-07-12 Thread Chris Lamb
Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: 59a9cd9d by Chris Lamb at 2020-07-12T12:55:42+01:00 data/dla-needed.txt: Triage ksh for stretch LTS. - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Reserve DLA-2279-1 for tomcat8

2020-07-12 Thread Markus Koschany
Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 662a322a by Markus Koschany at 2020-07-12T20:58:02+02:00 Reserve DLA-2279-1 for tomcat8 - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Track intellij-community-idea for now as undetermined

2020-07-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 786dc4c8 by Salvatore Bonaccorso at 2020-07-12T21:33:44+02:00 Track intellij-community-idea for now as undetermined Now there is intellij-idea, still itped as 747616 but as well

[Git][security-tracker-team/security-tracker][master] automatic update

2020-07-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: cebe054b by security tracker role at 2020-07-12T20:10:20+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Remove unbound from dla-needed.txt

2020-07-12 Thread Brian May
Brian May pushed to branch master at Debian Security Tracker / security-tracker Commits: 13af42c9 by Brian May at 2020-07-13T07:30:19+10:00 Remove unbound from dla-needed.txt unbound not supported anymore in Jessie or Stretch - - - - - 1 changed file: - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Remove http-parser from dla-needed.txt

2020-07-12 Thread Brian May
Brian May pushed to branch master at Debian Security Tracker / security-tracker Commits: a99a08b3 by Brian May at 2020-07-13T07:36:26+10:00 Remove http-parser from dla-needed.txt According to the information we have for CVE-2019-15605, http-parser is not supported in Jessie or Stretch:

[Git][security-tracker-team/security-tracker][master] Remove busybox from next-oldstable-point-update.txt

2020-07-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a511c9c3 by Salvatore Bonaccorso at 2020-07-13T07:27:01+02:00 Remove busybox from next-oldstable-point-update.txt - - - - - 1 changed file: - data/next-oldstable-point-update.txt Changes:

[Git][security-tracker-team/security-tracker][master] Remove listing of file in next-oldstable-point-update.txt

2020-07-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9e776c0f by Salvatore Bonaccorso at 2020-07-13T07:25:17+02:00 Remove listing of file in next-oldstable-point-update.txt - - - - - 1 changed file: - data/next-oldstable-point-update.txt

[Git][security-tracker-team/security-tracker][master] Remove pdfresurrect listing, will not happen anymore

2020-07-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7f8b0da1 by Salvatore Bonaccorso at 2020-07-13T07:28:17+02:00 Remove pdfresurrect listing, will not happen anymore - - - - - 1 changed file: - data/next-oldstable-point-update.txt

[Git][security-tracker-team/security-tracker][master] Add DSA entry for xen update

2020-07-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3b648d74 by Salvatore Bonaccorso at 2020-07-13T07:44:15+02:00 Add DSA entry for xen update - - - - - 1 changed file: - data/DSA/list Changes: =

[Git][security-tracker-team/security-tracker][master] Cleanup xen entries after DSA 4723-1

2020-07-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 53c1d3cc by Salvatore Bonaccorso at 2020-07-13T07:52:11+02:00 Cleanup xen entries after DSA 4723-1 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Track two experimental fixes for gitlab

2020-07-12 Thread Salvatore Bonaccorso
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7e0bfacb by Salvatore Bonaccorso at 2020-07-13T07:55:52+02:00 Track two experimental fixes for gitlab - - - - - 1 changed file: - data/CVE/list Changes: