[Secure-testing-commits] r56041 - data/CVE

2017-09-23 Thread security tracker role
Author: sectracker Date: 2017-09-23 09:10:13 + (Sat, 23 Sep 2017) New Revision: 56041 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list === --- data/CVE/list 2017-09-23 07:24:21 UTC (rev 56040) +++

[Secure-testing-commits] r56042 - data/CVE

2017-09-23 Thread László Böszörményi
Author: gcs Date: 2017-09-23 09:24:39 + (Sat, 23 Sep 2017) New Revision: 56042 Modified: data/CVE/list Log: Add CVE-2016-911[3-7]/openjpeg2 fixed version in unstable Modified: data/CVE/list === --- data/CVE/list

[Secure-testing-commits] r56045 - data

2017-09-23 Thread Emilio Pozuelo Monfort
Author: pochu Date: 2017-09-23 10:16:29 + (Sat, 23 Sep 2017) New Revision: 56045 Modified: data/dla-needed.txt Log: dla: claim fontforge Modified: data/dla-needed.txt === --- data/dla-needed.txt 2017-09-23 09:42:44 UTC (rev

[Secure-testing-commits] r56048 - in data: . DLA

2017-09-23 Thread Emilio Pozuelo Monfort
Author: pochu Date: 2017-09-23 12:38:41 + (Sat, 23 Sep 2017) New Revision: 56048 Modified: data/DLA/list data/dla-needed.txt Log: Reserve DLA-1107-1 for bzr Modified: data/DLA/list === --- data/DLA/list 2017-09-23

[Secure-testing-commits] r56049 - in data: . CVE

2017-09-23 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-09-23 12:38:57 + (Sat, 23 Sep 2017) New Revision: 56049 Modified: data/CVE/list data/next-point-update.txt Log: Add bug for pcb-rnd Modified: data/CVE/list === --- data/CVE/list 2017-09-23

[Secure-testing-commits] r56046 - in data: . CVE

2017-09-23 Thread Emilio Pozuelo Monfort
Author: pochu Date: 2017-09-23 10:31:52 + (Sat, 23 Sep 2017) New Revision: 56046 Modified: data/CVE/list data/dla-needed.txt Log: follow stretch/jessie and mark remaining fontforge issues as no-dsa for wheezy Modified: data/CVE/list

[Secure-testing-commits] r56050 - data/CVE

2017-09-23 Thread Emilio Pozuelo Monfort
Author: pochu Date: 2017-09-23 13:01:52 + (Sat, 23 Sep 2017) New Revision: 56050 Modified: data/CVE/list Log: CVE-2013-2099/bzr fixed in wheezy, remove no-dsa tag Modified: data/CVE/list === --- data/CVE/list 2017-09-23

[Secure-testing-commits] r56043 - data/CVE

2017-09-23 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-09-23 09:26:10 + (Sat, 23 Sep 2017) New Revision: 56043 Modified: data/CVE/list Log: Revert "Add CVE-2016-911[3-7]/openjpeg2 fixed version in unstable" Revert this commit for now as per previous commit for one openjpeg2 issue. Clarifying with maintainer where are

[Secure-testing-commits] r56044 - data

2017-09-23 Thread Emilio Pozuelo Monfort
Author: pochu Date: 2017-09-23 09:42:44 + (Sat, 23 Sep 2017) New Revision: 56044 Modified: data/dla-needed.txt Log: dla: claim bzr Modified: data/dla-needed.txt === --- data/dla-needed.txt 2017-09-23 09:26:10 UTC (rev 56043)

[Secure-testing-commits] r56047 - data/CVE

2017-09-23 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-09-23 12:01:28 + (Sat, 23 Sep 2017) New Revision: 56047 Modified: data/CVE/list Log: Record fixing version for CVE-2017-9216, #863279 Modified: data/CVE/list === --- data/CVE/list 2017-09-23

[Secure-testing-commits] r56040 - data/CVE

2017-09-23 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-09-23 07:24:21 + (Sat, 23 Sep 2017) New Revision: 56040 Modified: data/CVE/list Log: One openjpeg2 issue fixed in 2.2.0-1 Note there were mentionings of other CVEs in debian/changelog, but those does not seem to be fixed in 2.2.0 upstream. Asking back maintainer

[Secure-testing-commits] r56039 - data/CVE

2017-09-23 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-09-23 06:46:43 + (Sat, 23 Sep 2017) New Revision: 56039 Modified: data/CVE/list Log: Mark CVE-2017-8039 as NFU Modified: data/CVE/list === --- data/CVE/list 2017-09-23 06:46:16 UTC (rev 56038)

[Secure-testing-commits] r56038 - data/CVE

2017-09-23 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-09-23 06:46:16 + (Sat, 23 Sep 2017) New Revision: 56038 Modified: data/CVE/list Log: Add information for CVE-2017-14266 Modified: data/CVE/list === --- data/CVE/list 2017-09-23 00:38:15 UTC

[Secure-testing-commits] r56051 - data

2017-09-23 Thread Emilio Pozuelo Monfort
Author: pochu Date: 2017-09-23 13:47:17 + (Sat, 23 Sep 2017) New Revision: 56051 Modified: data/dla-needed.txt Log: dla: claim cacti Modified: data/dla-needed.txt === --- data/dla-needed.txt 2017-09-23 13:01:52 UTC (rev

[Secure-testing-commits] r56060 - data/CVE

2017-09-23 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-09-23 16:57:19 + (Sat, 23 Sep 2017) New Revision: 56060 Modified: data/CVE/list Log: Three CVEs fixed for qemu in unstable Modified: data/CVE/list === --- data/CVE/list 2017-09-23 16:25:26 UTC

[Secure-testing-commits] r56066 - data

2017-09-23 Thread Thorsten Alteholz
Author: alteholz Date: 2017-09-23 17:35:19 + (Sat, 23 Sep 2017) New Revision: 56066 Modified: data/dla-needed.txt Log: claim libraw Modified: data/dla-needed.txt === --- data/dla-needed.txt 2017-09-23 17:28:44 UTC (rev 56065)

[Secure-testing-commits] r56062 - data/CVE

2017-09-23 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-09-23 16:59:23 + (Sat, 23 Sep 2017) New Revision: 56062 Modified: data/CVE/list Log: Add new weechat issue Modified: data/CVE/list === --- data/CVE/list 2017-09-23 16:58:22 UTC (rev 56061) +++

[Secure-testing-commits] r56064 - data

2017-09-23 Thread Emilio Pozuelo Monfort
Author: pochu Date: 2017-09-23 17:24:34 + (Sat, 23 Sep 2017) New Revision: 56064 Modified: data/dla-needed.txt Log: dla: claim mcollective Modified: data/dla-needed.txt === --- data/dla-needed.txt 2017-09-23 17:01:11 UTC (rev

[Secure-testing-commits] r56053 - in data: . CVE

2017-09-23 Thread Emilio Pozuelo Monfort
Author: pochu Date: 2017-09-23 14:14:03 + (Sat, 23 Sep 2017) New Revision: 56053 Modified: data/CVE/list data/dla-needed.txt Log: CVE-2017-131/cacti: mark as ignored for wheezy too This is already fixed in wheezy, but let's follow jessie here in case we missed some change.

[Secure-testing-commits] r56058 - data

2017-09-23 Thread Emilio Pozuelo Monfort
Author: pochu Date: 2017-09-23 16:08:45 + (Sat, 23 Sep 2017) New Revision: 56058 Modified: data/dla-needed.txt Log: dla: claim ledger Modified: data/dla-needed.txt === --- data/dla-needed.txt 2017-09-23 16:00:32 UTC (rev

[Secure-testing-commits] r56063 - data

2017-09-23 Thread Emilio Pozuelo Monfort
Author: pochu Date: 2017-09-23 17:01:11 + (Sat, 23 Sep 2017) New Revision: 56063 Modified: data/dla-needed.txt Log: dla: drop minidjvu, all issues marked unimportant Modified: data/dla-needed.txt === --- data/dla-needed.txt

[Secure-testing-commits] r56054 - data

2017-09-23 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-09-23 14:49:07 + (Sat, 23 Sep 2017) New Revision: 56054 Modified: data/dsa-needed.txt Log: Add libidn2-0 to dsa-needed list Modified: data/dsa-needed.txt === --- data/dsa-needed.txt 2017-09-23

[Secure-testing-commits] r56059 - in data: . CVE

2017-09-23 Thread Emilio Pozuelo Monfort
Author: pochu Date: 2017-09-23 16:25:26 + (Sat, 23 Sep 2017) New Revision: 56059 Modified: data/CVE/list data/dla-needed.txt Log: mark ledger as no-dsa on wheezy following jessie/stretch Modified: data/CVE/list === ---

[Secure-testing-commits] r56052 - data/CVE

2017-09-23 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-09-23 14:08:36 + (Sat, 23 Sep 2017) New Revision: 56052 Modified: data/CVE/list Log: Process NFUs Modified: data/CVE/list === --- data/CVE/list 2017-09-23 13:47:17 UTC (rev 56051) +++

[Secure-testing-commits] r56055 - data/CVE

2017-09-23 Thread Emilio Pozuelo Monfort
Author: pochu Date: 2017-09-23 15:46:07 + (Sat, 23 Sep 2017) New Revision: 56055 Modified: data/CVE/list Log: CVE-2014-9984/glibc n/a on wheezy Modified: data/CVE/list === --- data/CVE/list 2017-09-23 14:49:07 UTC (rev

[Secure-testing-commits] r56057 - data

2017-09-23 Thread Emilio Pozuelo Monfort
Author: pochu Date: 2017-09-23 16:00:32 + (Sat, 23 Sep 2017) New Revision: 56057 Modified: data/dla-needed.txt Log: dla: remove eglibc, no important CVEs open at this time Modified: data/dla-needed.txt === ---

[Secure-testing-commits] r56056 - data/CVE

2017-09-23 Thread Emilio Pozuelo Monfort
Author: pochu Date: 2017-09-23 15:59:57 + (Sat, 23 Sep 2017) New Revision: 56056 Modified: data/CVE/list Log: mark some eglibc issues as no-dsa for wheezy too Modified: data/CVE/list === --- data/CVE/list 2017-09-23

[Secure-testing-commits] r56061 - data/CVE

2017-09-23 Thread Emilio Pozuelo Monfort
Author: pochu Date: 2017-09-23 16:58:22 + (Sat, 23 Sep 2017) New Revision: 56061 Modified: data/CVE/list Log: CVE-2017-9868/mosquitto: add link to upstream fix Modified: data/CVE/list === --- data/CVE/list 2017-09-23

[Secure-testing-commits] r56065 - in data: . CVE

2017-09-23 Thread Thorsten Alteholz
Author: alteholz Date: 2017-09-23 17:28:44 + (Sat, 23 Sep 2017) New Revision: 56065 Modified: data/CVE/list data/dla-needed.txt Log: following the security team Modified: data/CVE/list === --- data/CVE/list

[Secure-testing-commits] r56075 - data/CVE

2017-09-23 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-09-23 21:12:41 + (Sat, 23 Sep 2017) New Revision: 56075 Modified: data/CVE/list Log: CVEs assigned for wordpress issues Modified: data/CVE/list === --- data/CVE/list 2017-09-23 21:10:14 UTC

[Secure-testing-commits] r56077 - data/CVE

2017-09-23 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-09-23 21:18:29 + (Sat, 23 Sep 2017) New Revision: 56077 Modified: data/CVE/list Log: Process one NFU Modified: data/CVE/list === --- data/CVE/list 2017-09-23 21:15:47 UTC (rev 56076) +++

[Secure-testing-commits] r56067 - data/CVE

2017-09-23 Thread Thorsten Alteholz
Author: alteholz Date: 2017-09-23 18:02:15 + (Sat, 23 Sep 2017) New Revision: 56067 Modified: data/CVE/list Log: vulnerable code for CVE-2017-14265 not present in wheezy Modified: data/CVE/list === --- data/CVE/list

[Secure-testing-commits] r56069 - data/CVE

2017-09-23 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-09-23 20:50:22 + (Sat, 23 Sep 2017) New Revision: 56069 Modified: data/CVE/list Log: Fix first version which contains the fixes for qemu Modified: data/CVE/list === --- data/CVE/list 2017-09-23

[Secure-testing-commits] r56070 - data/CVE

2017-09-23 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-09-23 20:50:35 + (Sat, 23 Sep 2017) New Revision: 56070 Modified: data/CVE/list Log: CVE-2017-12809 fixed in unstable Modified: data/CVE/list === --- data/CVE/list 2017-09-23 20:50:22 UTC (rev

[Secure-testing-commits] r56071 - data/CVE

2017-09-23 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-09-23 20:50:46 + (Sat, 23 Sep 2017) New Revision: 56071 Modified: data/CVE/list Log: CVE-2017-9503 fixed in unstable Modified: data/CVE/list === --- data/CVE/list 2017-09-23 20:50:35 UTC (rev

[Secure-testing-commits] r56072 - data/CVE

2017-09-23 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-09-23 20:50:57 + (Sat, 23 Sep 2017) New Revision: 56072 Modified: data/CVE/list Log: CVE-2017-9375 fixed in unstable Modified: data/CVE/list === --- data/CVE/list 2017-09-23 20:50:46 UTC (rev

[Secure-testing-commits] r56073 - data/CVE

2017-09-23 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-09-23 20:56:50 + (Sat, 23 Sep 2017) New Revision: 56073 Modified: data/CVE/list Log: CVE-2017-14727 asigned for weechat issue, #876553 Modified: data/CVE/list === --- data/CVE/list 2017-09-23

[Secure-testing-commits] r56074 - data/CVE

2017-09-23 Thread security tracker role
Author: sectracker Date: 2017-09-23 21:10:14 + (Sat, 23 Sep 2017) New Revision: 56074 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list === --- data/CVE/list 2017-09-23 20:56:50 UTC (rev 56073) +++

[Secure-testing-commits] r56068 - data/CVE

2017-09-23 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-09-23 20:33:19 + (Sat, 23 Sep 2017) New Revision: 56068 Modified: data/CVE/list Log: CVE-2017-14603/asterisk fixed in unstable Modified: data/CVE/list === --- data/CVE/list 2017-09-23 18:02:15

[Secure-testing-commits] r56078 - data/CVE

2017-09-23 Thread Thorsten Alteholz
Author: alteholz Date: 2017-09-23 21:36:00 + (Sat, 23 Sep 2017) New Revision: 56078 Modified: data/CVE/list Log: vulnerable code for CVE-2017-14348 not present in wheezy Modified: data/CVE/list === --- data/CVE/list

[Secure-testing-commits] r56076 - data/CVE

2017-09-23 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-09-23 21:15:47 + (Sat, 23 Sep 2017) New Revision: 56076 Modified: data/CVE/list Log: Fill in details for wordpress issues Modified: data/CVE/list === --- data/CVE/list 2017-09-23 21:12:41 UTC

[Secure-testing-commits] r56081 - data/CVE

2017-09-23 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-09-24 05:35:37 + (Sun, 24 Sep 2017) New Revision: 56081 Modified: data/CVE/list Log: Apache2 issue fixed in unstable Modified: data/CVE/list === --- data/CVE/list 2017-09-24 05:34:55 UTC (rev

[Secure-testing-commits] r56080 - data/CVE

2017-09-23 Thread Salvatore Bonaccorso
Author: carnil Date: 2017-09-24 05:34:55 + (Sun, 24 Sep 2017) New Revision: 56080 Modified: data/CVE/list Log: weechat fixed in unstable Modified: data/CVE/list === --- data/CVE/list 2017-09-24 05:28:57 UTC (rev 56079)