[Git][security-tracker-team/security-tracker][master] Add CVE-2020-0093 (possibly affecting libexif upstream)

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d0706e02 by Salvatore Bonaccorso at 2020-05-15T06:16:27+02:00 Add CVE-2020-0093 (possibly affecting libexif upstream) - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-1945/ant

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8954b7ea by Salvatore Bonaccorso at 2020-05-14T22:57:49+02:00 Add Debian bug reference for CVE-2020-1945/ant - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] new libspring-security-2.0-java, glpi issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 27e598cb by Moritz Muehlenhoff at 2020-05-14T22:41:24+02:00 new libspring-security-2.0-java, glpi issues NFUs - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Handover openconnect to Mika as requested over IRC

Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker Commits: 35d07218 by Utkarsh Gupta at 2020-05-15T02:02:50+05:30 Handover openconnect to Mika as requested over IRC - - - - - 1 changed file: - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Revert "Reserve DLA-2211-1 for openconnect"

Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker Commits: 46cf1b47 by Utkarsh Gupta at 2020-05-15T02:00:27+05:30 Revert Reserve DLA-2211-1 for openconnect This reverts commit a9b3d90aa0cd14d2045ca89aa00917d9adc6d61c. - - - - - 2 changed files: -

[Git][security-tracker-team/security-tracker][master] Reserve DLA-2211-1 for openconnect

Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker Commits: a9b3d90a by Utkarsh Gupta at 2020-05-15T01:57:31+05:30 Reserve DLA-2211-1 for openconnect - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Reserve DLA-2210-1 for apt

: 20200514: apt is in lts-do-call-me, wait for feedback on debian-lts ML (sunweaver) --- bluez NOTE: 20200420: Many upstream refactorings make this hard to see where the NOTE: 20200420: check for bonded connections should go. (eg. 7d9718cfc, View it on GitLab: https://salsa.debian.org

[Git][security-tracker-team/security-tracker][master] Proces some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 493889bd by Salvatore Bonaccorso at 2020-05-14T22:14:20+02:00 Proces some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1e48c8dc by security tracker role at 2020-05-14T20:10:36+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-12823/openconnect

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7fb20b1b by Salvatore Bonaccorso at 2020-05-14T21:23:19+02:00 Add Debian bug reference for CVE-2020-12823/openconnect - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: b69d360a by Moritz Muehlenhoff at 2020-05-14T20:47:15+02:00 NFUs ant no-dsa - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: cbd1181f by Moritz Muehlenhoff at 2020-05-14T17:44:10+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] new clamav issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 5b430f84 by Moritz Muehlenhoff at 2020-05-14T17:34:46+02:00 new clamav issues freeradius no-dsa - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Update status for CVE-2018-8006/activemq

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 246a1f52 by Salvatore Bonaccorso at 2020-05-14T16:56:17+02:00 Update status for CVE-2018-8006/activemq - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2020-1941/activemq

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7a53b1e0 by Salvatore Bonaccorso at 2020-05-14T16:54:31+02:00 Add CVE-2020-1941/activemq - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2020-1945/ant

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8c1549b6 by Salvatore Bonaccorso at 2020-05-14T16:27:36+02:00 Add CVE-2020-1945/ant - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] LTS: unclaim and update notes on libdatetime-timezone-perl tzdata

: = data/dla-needed.txt = @@ -57,7 +57,8 @@ imagemagick (Markus Koschany) json-c (Mike Gabriel) NOTE: 20200514: json-c is currently orphaned, so possibly fix (old)stable, too? (sunweaver) -- -libdatetime-timezone-perl (Roberto C

[Git][security-tracker-team/security-tracker][master] LTS: claim graphicsmagick in dla-needed.txt

: = data/dla-needed.txt = @@ -49,7 +49,7 @@ exim4 (Roberto C. Sánchez) freerdp (Utkarsh Gupta) NOTE: 20200510: Vulnerable to at least CVE-2020-11042. (lamby) -- -graphicsmagick +graphicsmagick (Roberto C. Sánchez) NOTE: 20200514: no upstream patch

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 8a95e1da by Moritz Muehlenhoff at 2020-05-14T13:19:28+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim log4net.

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: 7b987f99 by Chris Lamb at 2020-05-14T10:12:36+01:00 data/dla-needed.txt: Claim log4net. - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Claim apt

= @@ -26,7 +26,7 @@ apache2 (Utkarsh Gupta) NOTE: 20200501: No CVE yet. (Ola) NOTE: 20200510: Asking upstream for CVE assignment. (utkarsh) -- -apt +apt (Utkarsh Gupta) NOTE: 20200514: apt is in lts-do-call-me, wait for feedback on debian-lts ML (sunweaver

[Git][security-tracker-team/security-tracker][master] Claim openconnect

Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker Commits: 2c895652 by Utkarsh Gupta at 2020-05-14T14:35:00+05:30 Claim openconnect - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt

[Git][security-tracker-team/security-tracker][master] Track fix for CVE-2020-12430/libvirt

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6bd5d2e7 by Salvatore Bonaccorso at 2020-05-14T10:44:32+02:00 Track fix for CVE-2020-12430/libvirt - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: cd6248d6 by Salvatore Bonaccorso at 2020-05-14T10:22:27+02:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e22c95f7 by security tracker role at 2020-05-14T08:10:20+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] libvirt fixed

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 2a59f3ce by Moritz Muehlenhoff at 2020-05-14T09:55:33+02:00 libvirt fixed - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2020-10742/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 067dc187 by Salvatore Bonaccorso at 2020-05-14T08:53:56+02:00 Add CVE-2020-10742/linux - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2020-12831

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 699f03a0 by Salvatore Bonaccorso at 2020-05-14T08:46:21+02:00 Add CVE-2020-12831 - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] LTS: claim cups

= @@ -41,7 +41,7 @@ bluez condor NOTE: 20200502: Upstream has only released workarounds; complete fix is still embargoed (roberto) -- -cups +cups (Anton Gladky) NOTE: 20200514: Two open issues. Added on request from Anton Gladky. (sunweaver) -- exim4 (Roberto