[Git][security-tracker-team/security-tracker][master] 2 commits: CVE has been fixed in recent upload

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: 35e2546c by Thorsten Alteholz at 2021-10-30T00:51:25+02:00 CVE has been fixed in recent upload - - - - - 418b1389 by Thorsten Alteholz at 2021-10-30T01:14:17+02:00 Reserve DLA-2800-1 for cups -

[Git][security-tracker-team/security-tracker][master] Drop opencv no-dsa tagged entries which got an update in DLA 2799-1

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 75cd1307 by Salvatore Bonaccorso at 2021-10-29T23:44:45+02:00 Drop opencv no-dsa tagged entries which got an update in DLA 2799-1 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Claim glusterfs in dla-needed.txt

-glusterfs +glusterfs (Markus Koschany) NOTE: 20211029: 15 CVEs that were fixed in jessie in DLA-1510-1 and DLA-1565-1 NOTE: 20211029: should also be fixed in stretch (bunk) -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracke

[Git][security-tracker-team/security-tracker][master] Reserve DLA-2799-1 for opencv

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: ec140577 by Markus Koschany at 2021-10-29T23:10:09+02:00 Reserve DLA-2799-1 for opencv - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-3756/libmysofa

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e43eef7e by Salvatore Bonaccorso at 2021-10-29T22:18:55+02:00 Add CVE-2021-3756/libmysofa - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-41173/golang-github-go-ethereum

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 41ee9031 by Salvatore Bonaccorso at 2021-10-29T22:18:15+02:00 Add CVE-2021-41173/golang-github-go-ethereum - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b9db915d by Salvatore Bonaccorso at 2021-10-29T22:17:29+02:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 898e84b3 by security tracker role at 2021-10-29T20:10:16+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add tracking bug for several libxstream-java issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 687a92c1 by Salvatore Bonaccorso at 2021-10-29T22:02:19+02:00 Add tracking bug for several libxstream-java issues - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Take libgit2

= @@ -53,10 +53,12 @@ glusterfs -- gpac (Roberto C. Sánchez) -- -libgit2 +libgit2 (Utkarsh) NOTE: 20211029: CVE-2018-10887/CVE-2018-10888/CVE-2018-15501 were fixed NOTE: 20211029: for jessie in DLA-1477-1 and should also be fixed in stretch NOTE: 20211029: 4

[Git][security-tracker-team/security-tracker][master] lts: retake firefox-esr and thunderbird

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 12ed4e25 by Emilio Pozuelo Monfort at 2021-10-29T12:41:56+02:00 lts: retake firefox-esr and thunderbird Working on ESR 91 toolchain updates. - - - - - 1 changed file: -

[Git][security-tracker-team/security-tracker][master] dla: add glusterfs

= @@ -47,6 +47,10 @@ firmware-nonfree NOTE: 20210731: WIP: https://salsa.debian.org/lts-team/packages/firmware-nonfree NOTE: 20210828: Most CVEs are difficult to backport. Contacted Ben regarding possible "ignore" tag -- +glusterfs + NOTE: 2021102

[Git][security-tracker-team/security-tracker][master] dla: add libgit2

= @@ -49,6 +49,11 @@ firmware-nonfree -- gpac (Roberto C. Sánchez) -- +libgit2 + NOTE: 20211029: CVE-2018-10887/CVE-2018-10888/CVE-2018-15501 were fixed + NOTE: 20211029: for jessie in DLA-1477-1 and should also be fixed in stretch + NOTE: 20211029: 4 other CVEs might

[Git][security-tracker-team/security-tracker][master] Reserve DLA-2798-1 for libdatetime-timezone-perl

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 25c3aa56 by Emilio Pozuelo Monfort at 2021-10-29T11:58:10+02:00 Reserve DLA-2798-1 for libdatetime-timezone-perl - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt

[Git][security-tracker-team/security-tracker][master] Reserve DLA-2797-1 for tzdata

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 0095854e by Emilio Pozuelo Monfort at 2021-10-29T11:52:26+02:00 Reserve DLA-2797-1 for tzdata - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Mark CVE-2021-40348 as NFU

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 38dc75e0 by Salvatore Bonaccorso at 2021-10-29T10:45:56+02:00 Mark CVE-2021-40348 as NFU - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2020-23052/mahara

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a903cec8 by Salvatore Bonaccorso at 2021-10-29T10:26:23+02:00 Add CVE-2020-23052/mahara - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-3655{0,1}/tikiwiki

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1bd9e08e by Salvatore Bonaccorso at 2021-10-29T10:25:36+02:00 Add CVE-2021-3655{0,1}/tikiwiki - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b7cf610b by Salvatore Bonaccorso at 2021-10-29T10:23:58+02:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2065cb1a by security tracker role at 2021-10-29T08:10:17+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] lts: take tzdata and libdatetime-timezone-perl

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: cc2c1b73 by Emilio Pozuelo Monfort at 2021-10-29T10:01:05+02:00 lts: take tzdata and libdatetime-timezone-perl - - - - - 1 changed file: - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add another round of chromium CVEs (fixed in 95.0.4638.69)

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2c0ff417 by Salvatore Bonaccorso at 2021-10-29T09:20:16+02:00 Add another round of chromium CVEs (fixed in 95.0.4638.69) - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-3892/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2bbaf12d by Salvatore Bonaccorso at 2021-10-29T08:58:25+02:00 Add CVE-2021-3892/linux - - - - - 1 changed file: - data/CVE/list Changes: =