[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] CVE-2018-7651 assigned

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a208b668 by Salvatore Bonaccorso at 2018-03-04T08:47:13+01:00 CVE-2018-7651 assigned - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] mariadb-10.2 removed from the archive

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a5901229 by Salvatore Bonaccorso at 2018-03-04T08:46:10+01:00 mariadb-10.2 removed from the archive - - - - - 1 changed file: - data/CVE/list Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Update CVE-2017-18174 information

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1bf89d19 by Salvatore Bonaccorso at 2018-03-04T08:35:17+01:00 Update CVE-2017-18174 information Rationale: in kernel-sec the conclusion was that the double-free issue is only introduced within

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] correct note timestamp in dla-needed

-needed.txt = --- a/data/dla-needed.txt +++ b/data/dla-needed.txt @@ -104,4 +104,4 @@ wordpress xen -- zsh (Abhijith PA) - NOTE: 20180218: Upstream repository is temporarily offline (abhijith) + NOTE: 20180303: Upstream repository is temporarily offline

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] node-moment: old ReDoS: fixed

Paul Wise pushed to branch master at Debian Security Tracker / security-tracker Commits: 9622c154 by Paul Wise at 2018-03-04T06:44:55+08:00 node-moment: old ReDoS: fixed - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] node-moment ReDoS

Paul Wise pushed to branch master at Debian Security Tracker / security-tracker Commits: 591358c2 by Paul Wise at 2018-03-04T06:43:20+08:00 node-moment ReDoS - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Fixup state for CVE-2017-18174 with kernel-sec

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2d540fd3 by Salvatore Bonaccorso at 2018-03-03T21:02:55+01:00 Fixup state for CVE-2017-18174 with kernel-sec - - - - - 1 changed file: - data/CVE/list Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Sync various issues with kernel-sec triage from benh

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 86548e12 by Salvatore Bonaccorso at 2018-03-03T21:00:17+01:00 Sync various issues with kernel-sec triage from benh - - - - - 1 changed file: - data/CVE/list Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Mark CVE-2018-6412 as unimportant

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f0022e75 by Salvatore Bonaccorso at 2018-03-03T20:55:34+01:00 Mark CVE-2018-6412 as unimportant - - - - - 1 changed file: - data/CVE/list Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2017-11430: reference the upstream issue

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 74f27354 by Salvatore Bonaccorso at 2018-03-03T16:46:54+01:00 CVE-2017-11430: reference the upstream issue - - - - - bee5644a by Salvatore Bonaccorso at 2018-03-03T16:47:08+01:00 Add bug

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] node-ssri unimportant, nodejs not covered by security support

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 26df51fa by Salvatore Bonaccorso at 2018-03-03T16:37:33+01:00 node-ssri unimportant, nodejs not covered by security support - - - - - 1 changed file: - data/CVE/list Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2017-18196/leptonlib jessie and wheezy not affected

Santiago R.R. pushed to branch master at Debian Security Tracker / security-tracker Commits: 06a9d7f0 by Santiago Ruano Rincón at 2018-03-03T16:18:08+01:00 Add CVE-2017-18196/leptonlib jessie and wheezy not affected Signed-off-by: Santiago Ruano Rincón santiag...@riseup.net - - - - - 1

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] npm serve NFU

Paul Wise pushed to branch master at Debian Security Tracker / security-tracker Commits: cb0e8f05 by Paul Wise at 2018-03-03T22:53:16+08:00 npm serve NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] electron details

Paul Wise pushed to branch master at Debian Security Tracker / security-tracker Commits: 329f9ae1 by Paul Wise at 2018-03-03T22:44:37+08:00 electron details - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] fastify NFU

Paul Wise pushed to branch master at Debian Security Tracker / security-tracker Commits: a2fdb27c by Paul Wise at 2018-03-03T22:41:39+08:00 fastify NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] node-ssri ReDoS

Paul Wise pushed to branch master at Debian Security Tracker / security-tracker Commits: 2e4f7bfa by Paul Wise at 2018-03-03T22:38:19+08:00 node-ssri ReDoS - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] node-hoek more details

Paul Wise pushed to branch master at Debian Security Tracker / security-tracker Commits: 48cc46ca by Paul Wise at 2018-03-03T22:32:27+08:00 node-hoek more details - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] SAML NFU

Paul Wise pushed to branch master at Debian Security Tracker / security-tracker Commits: 18a003d7 by Paul Wise at 2018-03-03T22:24:27+08:00 SAML NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] SAML vulns

Paul Wise pushed to branch master at Debian Security Tracker / security-tracker Commits: bd5dbfd6 by Paul Wise at 2018-03-03T22:18:18+08:00 SAML vulns - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] CVE-2017-7559, undertow: Link to patch, correct upstream bug

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 2f4fdf50 by Markus Koschany at 2018-03-03T15:13:04+01:00 CVE-2017-7559,undertow: Link to patch, correct upstream bug - - - - - 1 changed file: - data/CVE/list Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] CVE-2018-1048, undertow: Link to patch

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: d2e99abf by Markus Koschany at 2018-03-03T15:00:02+01:00 CVE-2018-1048,undertow: Link to patch - - - - - 1 changed file: - data/CVE/list Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2017-3144

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 055034a2 by Salvatore Bonaccorso at 2018-03-03T14:44:45+01:00 Add reference for CVE-2017-3144 - - - - - 1 changed file: - data/CVE/list Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Correct references to commits for isc-dhcp

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f4a8548a by Salvatore Bonaccorso at 2018-03-03T14:40:27+01:00 Correct references to commits for isc-dhcp While triaging I swapped the two commits, and wrongly associated the one for

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add fixed version for glibc issues now that 2.27-1 entered unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8c236712 by Salvatore Bonaccorso at 2018-03-03T14:17:50+01:00 Add fixed version for glibc issues now that 2.27-1 entered unstable Exceptionally keep the experimental tagged entry, but thats not

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add bug reference for CVE-2018-7262

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8853f6c0 by Salvatore Bonaccorso at 2018-03-03T11:31:23+01:00 Add bug reference for CVE-2018-7262 - - - - - 1 changed file: - data/CVE/list Changes: =

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f9aafce9 by Salvatore Bonaccorso at 2018-03-03T10:25:14+01:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Mark CVE-2018-7440/leptonlib as fixed with unstable upload

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 620f9687 by Salvatore Bonaccorso at 2018-03-03T10:12:58+01:00 Mark CVE-2018-7440/leptonlib as fixed with unstable upload - - - - - 1 changed file: - data/CVE/list Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ee853802 by security tracker role at 2018-03-03T09:10:14+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] REserve DSA for linux regression update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 001e81a6 by Salvatore Bonaccorso at 2018-03-03T09:25:42+01:00 REserve DSA for linux regression update - - - - - 2 changed files: - data/DSA/list - data/dsa-needed.txt Changes:

[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-1000115/memcached

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b706d7fb by Salvatore Bonaccorso at 2018-03-03T09:02:37+01:00 Add CVE-2018-1000115/memcached - - - - - 1 changed file: - data/CVE/list Changes: =