[Secure-testing-commits] r54458 - data/CVE

2017-08-08 Thread Moritz Muehlenhoff
Author: jmm Date: 2017-08-08 21:15:03 + (Tue, 08 Aug 2017) New Revision: 54458 Modified: data/CVE/list Log: two imagemagick issues unimportant Modified: data/CVE/list === --- data/CVE/list 2017-08-08 21:10:14 UTC (rev

[Secure-testing-commits] r54457 - data/CVE

2017-08-08 Thread security tracker role
Author: sectracker Date: 2017-08-08 21:10:14 + (Tue, 08 Aug 2017) New Revision: 54457 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list === --- data/CVE/list 2017-08-08 20:59:30 UTC (rev 54456) +++

[Secure-testing-commits] r54415 - data/CVE

2017-08-08 Thread security tracker role
Author: sectracker Date: 2017-08-08 09:10:14 + (Tue, 08 Aug 2017) New Revision: 54415 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list === --- data/CVE/list 2017-08-08 06:31:38 UTC (rev 54414) +++

[Secure-testing-commits] r54421 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 09:23:01 + (Tue, 08 Aug 2017) New Revision: 54421 Modified: data/CVE/list Log: CVE-2017-12672/imagemagick assigned Modified: data/CVE/list === --- data/CVE/list 2017-08-08 09:20:19 UTC

[Secure-testing-commits] r54417 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 09:16:05 + (Tue, 08 Aug 2017) New Revision: 54417 Modified: data/CVE/list Log: CVE-2017-12676/imagemagick, #870118 assigned Modified: data/CVE/list === --- data/CVE/list 2017-08-08

[Secure-testing-commits] r54416 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 09:12:16 + (Tue, 08 Aug 2017) New Revision: 54416 Modified: data/CVE/list Log: Add CVE-2017-12678/taglib Modified: data/CVE/list === --- data/CVE/list 2017-08-08 09:10:14 UTC (rev 54415)

[Secure-testing-commits] r54420 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 09:20:19 + (Tue, 08 Aug 2017) New Revision: 54420 Modified: data/CVE/list Log: CVE-2017-12673/imagemagick assigned Modified: data/CVE/list === --- data/CVE/list 2017-08-08 09:19:03 UTC

[Secure-testing-commits] r54419 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 09:19:03 + (Tue, 08 Aug 2017) New Revision: 54419 Modified: data/CVE/list Log: CVE-2017-12674/imagemagick Modified: data/CVE/list === --- data/CVE/list 2017-08-08 09:17:53 UTC (rev 54418)

[Secure-testing-commits] r54418 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 09:17:53 + (Tue, 08 Aug 2017) New Revision: 54418 Modified: data/CVE/list Log: CVE-2017-12675/imagemagick assigned Modified: data/CVE/list === --- data/CVE/list 2017-08-08 09:16:05 UTC

[Secure-testing-commits] r54413 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 06:21:05 + (Tue, 08 Aug 2017) New Revision: 54413 Modified: data/CVE/list Log: Process NFUs Modified: data/CVE/list === --- data/CVE/list 2017-08-08 04:56:25 UTC (rev 54412) +++

[Secure-testing-commits] r54414 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 06:31:38 + (Tue, 08 Aug 2017) New Revision: 54414 Modified: data/CVE/list Log: Add commit reference for CVE-2017-11171 Modified: data/CVE/list === --- data/CVE/list 2017-08-08 06:21:05

[Secure-testing-commits] r54425 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 10:16:52 + (Tue, 08 Aug 2017) New Revision: 54425 Modified: data/CVE/list Log: CVE-2017-12668 assigned Modified: data/CVE/list === --- data/CVE/list 2017-08-08 10:15:14 UTC (rev 54424)

[Secure-testing-commits] r54430 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 10:28:57 + (Tue, 08 Aug 2017) New Revision: 54430 Modified: data/CVE/list Log: CVE-2017-12663 assigned Modified: data/CVE/list === --- data/CVE/list 2017-08-08 10:27:10 UTC (rev 54429)

[Secure-testing-commits] r54442 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 18:22:24 + (Tue, 08 Aug 2017) New Revision: 54442 Modified: data/CVE/list Log: Add bug reference for CVE-2017-12678/taglib Modified: data/CVE/list === --- data/CVE/list 2017-08-08

[Secure-testing-commits] r54443 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 18:33:28 + (Tue, 08 Aug 2017) New Revision: 54443 Modified: data/CVE/list Log: Add three more CVEs for mariadb-10.0 Modified: data/CVE/list === --- data/CVE/list 2017-08-08 18:22:24 UTC

[Secure-testing-commits] r54423 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 10:12:48 + (Tue, 08 Aug 2017) New Revision: 54423 Modified: data/CVE/list Log: CVE-2017-12670/imagemagick assigned Modified: data/CVE/list === --- data/CVE/list 2017-08-08 10:10:39 UTC

[Secure-testing-commits] r54426 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 10:18:22 + (Tue, 08 Aug 2017) New Revision: 54426 Modified: data/CVE/list Log: CVE-2017-12667 assigned Modified: data/CVE/list === --- data/CVE/list 2017-08-08 10:16:52 UTC (rev 54425)

[Secure-testing-commits] r54431 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 10:32:06 + (Tue, 08 Aug 2017) New Revision: 54431 Modified: data/CVE/list Log: CVE-2017-12662 is assigned Modified: data/CVE/list === --- data/CVE/list 2017-08-08 10:28:57 UTC (rev 54430)

[Secure-testing-commits] r54422 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 10:10:39 + (Tue, 08 Aug 2017) New Revision: 54422 Modified: data/CVE/list Log: Add CVE-2017-12671/imagemagick Modified: data/CVE/list === --- data/CVE/list 2017-08-08 09:23:01 UTC (rev

[Secure-testing-commits] r54424 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 10:15:14 + (Tue, 08 Aug 2017) New Revision: 54424 Modified: data/CVE/list Log: CVE-2017-12669/imagemagick Modified: data/CVE/list === --- data/CVE/list 2017-08-08 10:12:48 UTC (rev 54423)

[Secure-testing-commits] r54428 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 10:22:04 + (Tue, 08 Aug 2017) New Revision: 54428 Modified: data/CVE/list Log: CVE-2017-12665 assigned Modified: data/CVE/list === --- data/CVE/list 2017-08-08 10:20:14 UTC (rev 54427)

[Secure-testing-commits] r54427 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 10:20:14 + (Tue, 08 Aug 2017) New Revision: 54427 Modified: data/CVE/list Log: CVE-2017-12666 assigned Modified: data/CVE/list === --- data/CVE/list 2017-08-08 10:18:22 UTC (rev 54426)

[Secure-testing-commits] r54429 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 10:27:10 + (Tue, 08 Aug 2017) New Revision: 54429 Modified: data/CVE/list Log: CVE-2017-12664 assigned Modified: data/CVE/list === --- data/CVE/list 2017-08-08 10:22:04 UTC (rev 54428)

[Secure-testing-commits] r54432 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 10:36:11 + (Tue, 08 Aug 2017) New Revision: 54432 Modified: data/CVE/list Log: Process several NFUs Modified: data/CVE/list === --- data/CVE/list 2017-08-08 10:32:06 UTC (rev 54431) +++

[Secure-testing-commits] r54433 - data/CVE

2017-08-08 Thread Henri Salo
Author: fgeek-guest Date: 2017-08-08 13:57:53 + (Tue, 08 Aug 2017) New Revision: 54433 Modified: data/CVE/list Log: minidjvu multiple vulnerabilities Modified: data/CVE/list === --- data/CVE/list 2017-08-08 10:36:11 UTC

[Secure-testing-commits] r54434 - data/CVE

2017-08-08 Thread Henri Salo
Author: fgeek-guest Date: 2017-08-08 14:04:32 + (Tue, 08 Aug 2017) New Revision: 54434 Modified: data/CVE/list Log: minidjvu bts Modified: data/CVE/list === --- data/CVE/list 2017-08-08 13:57:53 UTC (rev 54433) +++

[Secure-testing-commits] r54435 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 14:16:50 + (Tue, 08 Aug 2017) New Revision: 54435 Modified: data/CVE/list Log: Remove todo check items Modified: data/CVE/list === --- data/CVE/list 2017-08-08 14:04:32 UTC (rev 54434)

[Secure-testing-commits] r54436 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 14:17:00 + (Tue, 08 Aug 2017) New Revision: 54436 Modified: data/CVE/list Log: Add note for unimportant swftools, feedback from upstream Modified: data/CVE/list === --- data/CVE/list

[Secure-testing-commits] r54441 - data/CVE

2017-08-08 Thread Chris Lamb
Author: lamby Date: 2017-08-08 16:32:25 + (Tue, 08 Aug 2017) New Revision: 54441 Modified: data/CVE/list Log: CVE-2017-12678: [wheezy] - taglib (Vulnerable code not present) Modified: data/CVE/list === --- data/CVE/list

[Secure-testing-commits] r54440 - data

2017-08-08 Thread Chris Lamb
Author: lamby Date: 2017-08-08 16:29:36 + (Tue, 08 Aug 2017) New Revision: 54440 Modified: data/dla-needed.txt Log: Triage minidjvu for LTS Modified: data/dla-needed.txt === --- data/dla-needed.txt 2017-08-08 16:00:19 UTC

[Secure-testing-commits] r54444 - data/CVE

2017-08-08 Thread Moritz Muehlenhoff
Author: jmm Date: 2017-08-08 19:51:38 + (Tue, 08 Aug 2017) New Revision: 5 Modified: data/CVE/list Log: new firefox issues jasper no-dsa Modified: data/CVE/list === --- data/CVE/list 2017-08-08 18:33:28 UTC (rev

[Secure-testing-commits] r54446 - data/CVE

2017-08-08 Thread Moritz Muehlenhoff
Author: jmm Date: 2017-08-08 20:04:36 + (Tue, 08 Aug 2017) New Revision: 54446 Modified: data/CVE/list Log: taglib n/a in jessie, no-dsa in stretch Modified: data/CVE/list === --- data/CVE/list 2017-08-08 19:54:06 UTC

[Secure-testing-commits] r54448 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 20:13:14 + (Tue, 08 Aug 2017) New Revision: 54448 Modified: data/CVE/list Log: Both commits are included in upstream 0.8.8e Modified: data/CVE/list === --- data/CVE/list 2017-08-08

[Secure-testing-commits] r54447 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 20:13:03 + (Tue, 08 Aug 2017) New Revision: 54447 Modified: data/CVE/list Log: Update note for CVE-2017-131 Modified: data/CVE/list === --- data/CVE/list 2017-08-08 20:04:36 UTC (rev

[Secure-testing-commits] r54450 - data

2017-08-08 Thread Lucas Kanashiro
Author: kanashiro Date: 2017-08-08 20:16:06 + (Tue, 08 Aug 2017) New Revision: 54450 Modified: data/dla-needed.txt Log: claim php5 in dla-needed.txt Modified: data/dla-needed.txt === --- data/dla-needed.txt 2017-08-08

[Secure-testing-commits] r54445 - data

2017-08-08 Thread Moritz Muehlenhoff
Author: jmm Date: 2017-08-08 19:54:06 + (Tue, 08 Aug 2017) New Revision: 54445 Modified: data/dsa-needed.txt Log: add firefox Modified: data/dsa-needed.txt === --- data/dsa-needed.txt 2017-08-08 19:51:38 UTC (rev 5) +++

[Secure-testing-commits] r54451 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 20:17:01 + (Tue, 08 Aug 2017) New Revision: 54451 Modified: data/CVE/list Log: Fix spelling error in note Modified: data/CVE/list === --- data/CVE/list 2017-08-08 20:16:06 UTC (rev 54450)

[Secure-testing-commits] r54452 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 20:17:13 + (Tue, 08 Aug 2017) New Revision: 54452 Modified: data/CVE/list Log: Remove now obsolted todo item Modified: data/CVE/list === --- data/CVE/list 2017-08-08 20:17:01 UTC (rev

[Secure-testing-commits] r54453 - data/CVE

2017-08-08 Thread Raphael Geissert
Author: geissert Date: 2017-08-08 20:27:17 + (Tue, 08 Aug 2017) New Revision: 54453 Modified: data/CVE/list Log: silverjuke appears to embed/have forked taglib Modified: data/CVE/list === --- data/CVE/list 2017-08-08

[Secure-testing-commits] r54454 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 20:45:03 + (Tue, 08 Aug 2017) New Revision: 54454 Modified: data/CVE/list Log: Mark two CVEs for firefox(-esr) as n/a The specific function is WindowsDllDetourPatcher which is only relevant on windows. Modified: data/CVE/list

[Secure-testing-commits] r54455 - data/CVE

2017-08-08 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-08-08 20:56:59 + (Tue, 08 Aug 2017) New Revision: 54455 Modified: data/CVE/list Log: Update status for CVE-2017-11720 The reproducer is in meanwhile open, and indeed this is a duplicate of the #777159 bug, and as well of the bug reported by Agostino Sarubbo from

[Secure-testing-commits] r54456 - data

2017-08-08 Thread Raphael Geissert
Author: geissert Date: 2017-08-08 20:59:30 + (Tue, 08 Aug 2017) New Revision: 54456 Modified: data/embedded-code-copies Log: track embedded copies of heimdal and taglib Modified: data/embedded-code-copies === ---

[Secure-testing-commits] r54437 - data/CVE

2017-08-08 Thread Moritz Muehlenhoff
Author: jmm Date: 2017-08-08 15:35:19 + (Tue, 08 Aug 2017) New Revision: 54437 Modified: data/CVE/list Log: mark some imagemagick memleaks as unimportant we won't treat these as security issues for older releases glance is treated as a documented shortcoming by upstream Modified:

[Secure-testing-commits] r54438 - data/CVE

2017-08-08 Thread Moritz Muehlenhoff
Author: jmm Date: 2017-08-08 15:42:38 + (Tue, 08 Aug 2017) New Revision: 54438 Modified: data/CVE/list Log: more unimportant imagemagick issues new libav issue NFUs Modified: data/CVE/list === --- data/CVE/list

[Secure-testing-commits] r54439 - data/CVE

2017-08-08 Thread Moritz Muehlenhoff
Author: jmm Date: 2017-08-08 16:00:19 + (Tue, 08 Aug 2017) New Revision: 54439 Modified: data/CVE/list Log: ffmpeg fixed long time ago Modified: data/CVE/list === --- data/CVE/list 2017-08-08 15:42:38 UTC (rev 54438)