[Git][security-tracker-team/security-tracker][master] NFU

Henri Salo pushed to branch master at Debian Security Tracker / security-tracker Commits: 132d700b by Henri Salo at 2020-05-12T08:36:58+03:00 NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list =

[Git][security-tracker-team/security-tracker][master] CVE-2020-12761,imlib2: Fixed in unstable

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 33ef355b by Markus Koschany at 2020-05-12T01:19:53+02:00 CVE-2020-12761,imlib2: Fixed in unstable - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] php-horde-data got reintroduced in Debian

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 67cda407 by Salvatore Bonaccorso at 2020-05-11T22:33:04+02:00 php-horde-data got reintroduced in Debian - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Track fix via experimental for openexr issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e4f7080b by Salvatore Bonaccorso at 2020-05-11T22:30:02+02:00 Track fix via experimental for openexr issues - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2020-1186{3,4,5,6}/libemf

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2c5d255d by Salvatore Bonaccorso at 2020-05-11T22:20:42+02:00 Add CVE-2020-1186{3,4,5,6}/libemf - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some more NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 46845545 by Salvatore Bonaccorso at 2020-05-11T22:18:23+02:00 Process some more NFUs - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: adc13951 by Salvatore Bonaccorso at 2020-05-11T22:12:20+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7217e547 by security tracker role at 2020-05-11T20:10:21+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add fixed version via unstable for CVE-2020-11713/wolfssl

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a8ad95f3 by Salvatore Bonaccorso at 2020-05-11T22:03:40+02:00 Add fixed version via unstable for CVE-2020-11713/wolfssl - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-12762/json-c

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e581bd78 by Salvatore Bonaccorso at 2020-05-11T22:01:40+02:00 Add Debian bug reference for CVE-2020-12762/json-c - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] LTS: claim libdatetime-timezone-perl and tzdata in dla-needed.txt

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: a1b277d1 by Roberto C. Sánchez at 2020-05-11T14:21:17-04:00 LTS: claim libdatetime-timezone-perl and tzdata in dla-needed.txt - - - - - 1 changed file: - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-12755/kio-extras

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 76b37e33 by Salvatore Bonaccorso at 2020-05-11T19:16:58+02:00 Add Debian bug reference for CVE-2020-12755/kio-extras - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add tracking for CVE-2018-1285/log4net

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8a9c50c6 by Salvatore Bonaccorso at 2020-05-11T19:15:52+02:00 Add tracking for CVE-2018-1285/log4net - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] new kio-extras issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 91213024 by Moritz Muehlenhoff at 2020-05-11T18:08:17+02:00 new kio-extras issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Claim imagemagick in dla-needed.txt

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 135c2275 by Markus Koschany at 2020-05-11T17:23:36+02:00 Claim imagemagick in dla-needed.txt - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Remove no-dsa flag from Tomcat 8 / Jessie in CVE list.

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: cc058251 by Markus Koschany at 2020-05-11T17:15:25+02:00 Remove no-dsa flag from Tomcat 8 / Jessie in CVE list. - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] 2 commits: Remove imlib2 from dla-needed.txt

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 2da4be8d by Markus Koschany at 2020-05-11T17:13:53+02:00 Remove imlib2 from dla-needed.txt - - - - - d8fb8968 by Markus Koschany at 2020-05-11T17:14:43+02:00 Reserve DLA-2209-1 for tomcat8 - - - -

[Git][security-tracker-team/security-tracker][master] 3 commits: Add new exim4 issue (AUTH bypass in SPA authentication method)

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 69db1206 by Salvatore Bonaccorso at 2020-05-11T08:40:14+02:00 Add new exim4 issue (AUTH bypass in SPA authentication method) - - - - - 3f6433de by Salvatore Bonaccorso at

[Git][security-tracker-team/security-tracker][master] Mark CVE-2020-9489/tika as ignored instead of no-dsa

Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker Commits: 1ae57983 by Utkarsh Gupta at 2020-05-11T19:28:21+05:30 Mark CVE-2020-9489/tika as ignored instead of no-dsa - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Fix typo to actually mark CVE-2020-11025/wordpress as not-affected in Jessie

Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker Commits: 372c298b by Utkarsh Gupta at 2020-05-11T19:01:18+05:30 Fix typo to actually mark CVE-2020-11025/wordpress as not-affected in Jessie - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] new qutebrowser issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 4b74c5b0 by Moritz Muehlenhoff at 2020-05-11T14:56:37+02:00 new qutebrowser issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity

Holger Levsen pushed to branch master at Debian Security Tracker / security-tracker Commits: 0bb7e9e8 by Holger Levsen at 2020-05-11T13:51:07+02:00 semi-automatic unclaim after 2 weeks of inactivity Signed-off-by: Holger Levsen hol...@layer-acht.org - - - - - 1 changed file: -

[Git][security-tracker-team/security-tracker][master] new json-c issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 4b21874d by Moritz Muehlenhoff at 2020-05-11T13:27:38+02:00 new json-c issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] one systemd issue unimportant

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: ce08d76d by Moritz Muehlenhoff at 2020-05-11T13:00:53+02:00 one systemd issue unimportant add tracking for fex issue mark edk2 issues as ignored for stretch - - - - - 2 changed files: -

[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Add attributes to recent notes.

Alteholz) - NOTE: 20200420: still testing package, original patch does not seem to be enough, still ongoing - NOTE: 20200511: new CVEs arrived + NOTE: 20200420: still testing package, original patch does not seem to be enough, still ongoing (thorsten) + NOTE: 20200511: new CVEs arrived (thorsten

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: cb6aa8a5 by Moritz Muehlenhoff at 2020-05-11T10:58:37+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 34abb718 by security tracker role at 2020-05-11T08:10:12+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] update note

= @@ -76,9 +76,11 @@ nginx -- opendmarc (Thorsten Alteholz) NOTE: 20200420: still testing package, original patch does not seem to be enough, still ongoing + NOTE: 20200511: new CVEs arrived -- php5 (Thorsten Alteholz) NOTE: 20200427: embedded software