[Git][security-tracker-team/security-tracker][master] Add CVE-2022-190{7,8}/libmobi

2022-05-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c71149ce by Salvatore Bonaccorso at 2022-05-27T23:09:14+02:00 Add CVE-2022-190{7,8}/libmobi - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-189{7,8}/vim

2022-05-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b2da45f8 by Salvatore Bonaccorso at 2022-05-27T22:51:11+02:00 Add CVE-2022-189{7,8}/vim - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process one NFU

2022-05-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ab8b2b9e by Salvatore Bonaccorso at 2022-05-27T22:23:15+02:00 Process one NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

2022-05-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9901a029 by security tracker role at 2022-05-27T20:10:19+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add oss-security reference for CVE-2022-1462

2022-05-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 21c1f539 by Salvatore Bonaccorso at 2022-05-27T21:46:31+02:00 Add oss-security reference for CVE-2022-1462 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Reference upstream commits for CVE-2022-21831

2022-05-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b871cf4f by Salvatore Bonaccorso at 2022-05-27T21:34:33+02:00 Reference upstream commits for CVE-2022-21831 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Reference upstream commits for CVE-2022-22577

2022-05-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: cfe1ab89 by Salvatore Bonaccorso at 2022-05-27T21:30:34+02:00 Reference upstream commits for CVE-2022-22577 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add upstream tag information for CVE-2022-1586 commit

2022-05-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b17c9967 by Salvatore Bonaccorso at 2022-05-27T21:19:33+02:00 Add upstream tag information for CVE-2022-1586 commit - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-428{59,60}/mxml

2022-05-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 81426cdd by Salvatore Bonaccorso at 2022-05-27T21:16:06+02:00 Add CVE-2021-428{59,60}/mxml - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for pcre2 issues

2022-05-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1bfaa35f by Salvatore Bonaccorso at 2022-05-27T20:41:06+02:00 Add Debian bug reference for pcre2 issues - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] buster/bullseye triage

2022-05-27 Thread Moritz Muehlenhoff (@jmm)
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 0ffdcddf by Moritz Muehlenhoff at 2022-05-27T19:22:07+02:00 buster/bullseye triage add one more patch needed for pcre issue - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] pillow fixed in sid

2022-05-27 Thread Moritz Muehlenhoff (@jmm)
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 7c49ca40 by Moritz Muehlenhoff at 2022-05-27T15:57:29+02:00 pillow fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] CVE-2022-21831 & CVE-2022-22577 in rails

2022-05-27 Thread Neil Williams (@codehelp)
Neil Williams pushed to branch master at Debian Security Tracker / security-tracker Commits: e51505dc by Neil Williams at 2022-05-27T12:58:17+01:00 CVE-2022-21831 CVE-2022-22577 in rails - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

2022-05-27 Thread Neil Williams (@codehelp)
Neil Williams pushed to branch master at Debian Security Tracker / security-tracker Commits: 39f29214 by Neil Williams at 2022-05-27T12:38:42+01:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Reserve DLA-3030-1 for zipios++

2022-05-27 Thread Thorsten Alteholz (@alteholz)
Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: 268504d1 by Thorsten Alteholz at 2022-05-27T13:28:50+02:00 Reserve DLA-3030-1 for zipios++ - - - - - 2 changed files: - data/CVE/list - data/DLA/list Changes:

[Git][security-tracker-team/security-tracker][master] Process some NFUs

2022-05-27 Thread Neil Williams (@codehelp)
Neil Williams pushed to branch master at Debian Security Tracker / security-tracker Commits: 4108bdf6 by Neil Williams at 2022-05-27T12:27:30+01:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] 2 commits: Process some Apple NFUs

2022-05-27 Thread Neil Williams (@codehelp)
Neil Williams pushed to branch master at Debian Security Tracker / security-tracker Commits: 1d0120aa by Neil Williams at 2022-05-27T12:00:21+01:00 Process some Apple NFUs - - - - - 78f25c1c by Neil Williams at 2022-05-27T12:09:01+01:00 Process some Apple NFUs - - - - - 1 changed file: -

[Git][security-tracker-team/security-tracker][master] Undo incomplete change for CVE-2021-42859

2022-05-27 Thread Neil Williams (@codehelp)
Neil Williams pushed to branch master at Debian Security Tracker / security-tracker Commits: 73426cf4 by Neil Williams at 2022-05-27T11:51:31+01:00 Undo incomplete change for CVE-2021-42859 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some Apple NFUs

2022-05-27 Thread Neil Williams (@codehelp)
Neil Williams pushed to branch master at Debian Security Tracker / security-tracker Commits: 97abd286 by Neil Williams at 2022-05-27T11:47:03+01:00 Process some Apple NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process some NFUs

2022-05-27 Thread Neil Williams (@codehelp)
Neil Williams pushed to branch master at Debian Security Tracker / security-tracker Commits: dc2da96b by Neil Williams at 2022-05-27T11:15:03+01:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Angular is the replacement for angular.js

2022-05-27 Thread Neil Williams (@codehelp)
Neil Williams pushed to branch master at Debian Security Tracker / security-tracker Commits: 2cddbf30 by Neil Williams at 2022-05-27T10:47:50+01:00 Angular is the replacement for angular.js angular.js is not affected, vulnerable code is not present No ITP/RFP exists for angular/angular

[Git][security-tracker-team/security-tracker][master] dla-needed.txt: Claim pjproject

2022-05-27 Thread Abhijith PA (@abhijith)
-needed.txt = @@ -181,7 +181,8 @@ pdns NOTE: 20220506: package builds but does not run a test suite, and I lack the NOTE: 20220506: know-how for testing manually (enrico) -- -pjproject +pjproject (Abhijith PA) + NOTE: 20220527: Same CVE asterisk (abhijith

[Git][security-tracker-team/security-tracker][master] Process some NFUs

2022-05-27 Thread Neil Williams (@codehelp)
Neil Williams pushed to branch master at Debian Security Tracker / security-tracker Commits: d187fd97 by Neil Williams at 2022-05-27T10:20:16+01:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process NFUs

2022-05-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8f5ecbd6 by Salvatore Bonaccorso at 2022-05-27T10:36:12+02:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process NFUs

2022-05-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 18508fd0 by Salvatore Bonaccorso at 2022-05-27T10:33:43+02:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] CVE-2021-32627,CVE-2021-32628/redis: precise triage

2022-05-27 Thread Sylvain Beucler (@beuc)
Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker Commits: c352801c by Sylvain Beucler at 2022-05-27T10:26:20+02:00 CVE-2021-32627,CVE-2021-32628/redis: precise triage - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] automatic update

2022-05-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f137f91f by security tracker role at 2022-05-27T08:10:13+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] 4 commits: dla: add thunderbird

2022-05-27 Thread Sylvain Beucler (@beuc)
= @@ -198,6 +198,10 @@ postgresql-9.6 puppet-module-puppetlabs-firewall NOTE: 20220402: no Debian maintainers activity since 2018 (Beuc/front-desk) -- +qemu + NOTE: 20220527: a few new CVEs since last DLA, and buster got no updates since 2 years, + NOTE

[Git][security-tracker-team/security-tracker][master] Drop redis from dla-needed.txt.

2022-05-27 Thread Chris Lamb (@lamby)
Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: 6b5b6f74 by Chris Lamb at 2022-05-27T08:40:49+01:00 Drop redis from dla-needed.txt. Feel free to re-add if The Script suggests so. :) - - - - - 1 changed file: - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] 2 commits: Triage CVE-2022-24735 in redis for stretch LTS.

2022-05-27 Thread Chris Lamb (@lamby)
Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: d79fd6fe by Chris Lamb at 2022-05-27T08:38:17+01:00 Triage CVE-2022-24735 in redis for stretch LTS. - - - - - e1c61434 by Chris Lamb at 2022-05-27T08:39:34+01:00 Triage CVE-2022-24736 in redis for