[Git][security-tracker-team/security-tracker][master] Unclaim freerdp

Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker Commits: 38f58458 by Utkarsh Gupta at 2020-05-21T13:56:00+05:30 Unclaim freerdp - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt

[Git][security-tracker-team/security-tracker][master] one chromium issue n/a

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: c6bcdf3f by Moritz Muehlenhoff at 2020-05-21T11:12:10+02:00 one chromium issue n/a - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 68a3d2a9 by security tracker role at 2020-05-21T08:10:21+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2020-8161/ruby-rack

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 813deb69 by Salvatore Bonaccorso at 2020-05-21T09:09:11+02:00 Add CVE-2020-8161/ruby-rack - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2020-1727 as NFU

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9304096c by Salvatore Bonaccorso at 2020-05-21T09:10:11+02:00 Add CVE-2020-1727 as NFU - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2019-11048/php*

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a60bbb7a by Salvatore Bonaccorso at 2020-05-21T09:14:35+02:00 Add CVE-2019-11048/php* - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Update note for condor in jessie LTS.

-needed.txt = @@ -40,6 +40,7 @@ bluez (Roberto C. Sánchez) -- condor NOTE: 20200502: Upstream has only released workarounds; complete fix is still embargoed (roberto) + NOTE: 20200521: Still embargoed (eg. https://research.cs.wisc.edu/htcondor/security

[Git][security-tracker-team/security-tracker][master] Add CVE-2020-9484/tomcat* issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: fab41b91 by Salvatore Bonaccorso at 2020-05-21T09:06:17+02:00 Add CVE-2020-9484/tomcat* issues - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Track fixed versions for netqmail via unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: dbd963b4 by Salvatore Bonaccorso at 2020-05-21T11:03:53+02:00 Track fixed versions for netqmail via unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add new chromium CVEs from 83.0.4103.61 release

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 112781b6 by Salvatore Bonaccorso at 2020-05-21T08:29:28+02:00 Add new chromium CVEs from 83.0.4103.61 release - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Move not-affected entry to CVE-2020-6477/chromium

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 30d19c90 by Salvatore Bonaccorso at 2020-05-21T11:22:19+02:00 Move not-affected entry to CVE-2020-6477/chromium Fixes: c6bcdf3f1743 (one chromium issue n/a) - - - - - 1 changed file: -

[Git][security-tracker-team/security-tracker][master] fix typo in DSA list

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 6d3e9b71 by Moritz Muehlenhoff at 2020-05-21T23:24:15+02:00 fix typo in DSA list add status for stretch - - - - - 2 changed files: - data/CVE/list - data/DSA/list Changes:

[Git][security-tracker-team/security-tracker][master] pdns-recursor DSA

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 9fa52acc by Moritz Muehlenhoff at 2020-05-21T23:12:40+02:00 pdns-recursor DSA - - - - - 3 changed files: - data/CVE/list - data/DSA/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] LTS: update notes on bluez

(untested patch) - NOTE: 20200513: Another alternative would be to backport the fixed version in Stretch. - NOTE: 20200518: After further discussion (see above thread), stretch backport will be done (roberto) + NOTE: 20200521: Uploaded backport (version 5.43-2+deb8u1), which now must go through NEW

[Git][security-tracker-team/security-tracker][master] Add CVE-2020-13253/qemu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5180a737 by Salvatore Bonaccorso at 2020-05-22T07:02:09+02:00 Add CVE-2020-13253/qemu - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2020-8161/ruby-rack via unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a0995a54 by Salvatore Bonaccorso at 2020-05-22T06:38:17+02:00 Add fixed version for CVE-2020-8161/ruby-rack via unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Mark CVE-2020-12693 as no-dsa for buster and stretch

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e623c765 by Salvatore Bonaccorso at 2020-05-22T06:44:01+02:00 Mark CVE-2020-12693 as no-dsa for buster and stretch - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2020-12693/slurm-llnl

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 039122e2 by Salvatore Bonaccorso at 2020-05-22T06:34:30+02:00 Add CVE-2020-12693/slurm-llnl - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] LTS: update notes on tomcat8

but not uploaded. +tomcat8 (Markus Koschany) + NOTE: 20200521: One patch resulted to have a bug that had to be fixed; new CVE also released. (roberto) -- transmission (Thorsten Alteholz) -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7c1605c6 by security tracker role at 2020-05-21T20:10:24+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Track fixes for libexif update via stretch-pu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a1a235b1 by Salvatore Bonaccorso at 2020-05-21T21:18:06+02:00 Track fixes for libexif update via stretch-pu - - - - - 1 changed file: - data/next-oldstable-point-update.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2020-1311{2,3,4}/libexif issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7e65931e by Salvatore Bonaccorso at 2020-05-21T21:09:43+02:00 Add CVE-2020-1311{2,3,4}/libexif issues - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Track proposed update for libexif via buster-pu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0ea2f577 by Salvatore Bonaccorso at 2020-05-21T21:15:26+02:00 Track proposed update for libexif via buster-pu - - - - - 1 changed file: - data/next-point-update.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-9484/tomcat9

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2b66c33b by Salvatore Bonaccorso at 2020-05-21T14:34:56+02:00 Add Debian bug reference for CVE-2020-9484/tomcat9 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update CVE-2020-10736/ceph

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 997acc3f by Salvatore Bonaccorso at 2020-05-21T14:42:40+02:00 Update CVE-2020-10736/ceph - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2020-1955/couchdb

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 969c71e3 by Salvatore Bonaccorso at 2020-05-21T14:33:39+02:00 Add CVE-2020-1955/couchdb - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2020-9484/tomcat9 via unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f7bcfc8b by Salvatore Bonaccorso at 2020-05-21T16:48:00+02:00 Add fixed version for CVE-2020-9484/tomcat9 via unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update note for netqmail

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a2624c27 by Salvatore Bonaccorso at 2020-05-21T16:02:50+02:00 Update note for netqmail - - - - - 1 changed file: - data/dsa-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] CVE-2020-0093/libexif fixed in unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 76ac1400 by Salvatore Bonaccorso at 2020-05-21T16:14:22+02:00 CVE-2020-0093/libexif fixed in unstable - - - - - 1 changed file: - data/CVE/list Changes: