[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e42624b9 by Salvatore Bonaccorso at 2022-06-21T07:57:15+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Sync some linux issues with kernel-sec triaging

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7a889c27 by Salvatore Bonaccorso at 2022-06-21T06:56:21+02:00 Sync some linux issues with kernel-sec triaging - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update status for CVE-2022-20148

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 874974e4 by Salvatore Bonaccorso at 2022-06-21T06:26:49+02:00 Update status for CVE-2022-20148 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 9c67d6cb by Moritz Muehlenhoff at 2022-06-20T23:30:47+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-32983 (to be checked)

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b41419aa by Salvatore Bonaccorso at 2022-06-20T22:26:15+02:00 Add CVE-2022-32983 (to be checked) - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-33913/mahara

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 634e8bec by Salvatore Bonaccorso at 2022-06-20T22:25:50+02:00 Add CVE-2022-33913/mahara - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: be956265 by Salvatore Bonaccorso at 2022-06-20T22:23:20+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c7c3560c by Salvatore Bonaccorso at 2022-06-20T22:20:22+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-33903

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: dc9e68c6 by Salvatore Bonaccorso at 2022-06-20T22:18:56+02:00 Add CVE-2022-33903 - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: fa5d012f by security tracker role at 2022-06-20T20:10:20+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-40678/piwigo

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3c0ec8c9 by Salvatore Bonaccorso at 2022-06-20T22:09:02+02:00 Add CVE-2021-40678/piwigo - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 158daa36 by Salvatore Bonaccorso at 2022-06-20T22:08:29+02:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-41458/gpac

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0a67cfe2 by Salvatore Bonaccorso at 2022-06-20T22:04:28+02:00 Add CVE-2021-41458/gpac - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-41490/ompl

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9175f995 by Salvatore Bonaccorso at 2022-06-20T22:00:33+02:00 Add CVE-2021-41490/ompl - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2022-21831/rails via unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 078d5d5e by Salvatore Bonaccorso at 2022-06-20T21:29:48+02:00 Track fixed version for CVE-2022-21831/rails via unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] 3 commits: Fix typo in NOTE for CVE-2022-32250

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 202a42ea by Salvatore Bonaccorso at 2022-06-20T21:10:30+02:00 Fix typo in NOTE for CVE-2022-32250 - - - - - fe2aa937 by Salvatore Bonaccorso at 2022-06-20T21:16:31+02:00 Add reference to

[Git][security-tracker-team/security-tracker][master] Remove no-dsa tagged entry for jodd in bullseye (not present in the suite)

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4734c76c by Salvatore Bonaccorso at 2022-06-20T21:06:42+02:00 Remove no-dsa tagged entry for jodd in bullseye (not present in the suite) - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Reference upstream commit for CVE-2022-29631

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3f4cd995 by Salvatore Bonaccorso at 2022-06-20T21:06:01+02:00 Reference upstream commit for CVE-2022-29631 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update information for CVE-2022-29241/jupyter-server

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2b75a31b by Salvatore Bonaccorso at 2022-06-20T21:02:38+02:00 Update information for CVE-2022-29241/jupyter-server Upstream fixed this in version 1.17.1 for Jupyther Server which is included

[Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity

Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker Commits: 386165e9 by Anton Gladky at 2022-06-20T20:56:07+02:00 semi-automatic unclaim after 2 weeks of inactivity Signed-off-by: Anton Gladky gl...@debian.org - - - - - 1 changed file: -

[Git][security-tracker-team/security-tracker][master] Reference upstream commit for CVE-2022-33987

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a298c9e3 by Salvatore Bonaccorso at 2022-06-20T20:53:13+02:00 Reference upstream commit for CVE-2022-33987 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] LTS: add note about halibut

: is producing the same output. (Anton) + NOTE: 20220620: test package is built locally. Testing (Anton) -- horizon NOTE: 20220529: Programming language: Python. View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/11e64acd89f39521bfccd90968b0fefec956c226

[Git][security-tracker-team/security-tracker][master] Add fixed version for vlc issues addressed in DSA-5165-1

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9fb476e4 by Salvatore Bonaccorso at 2022-06-20T20:47:46+02:00 Add fixed version for vlc issues addressed in DSA-5165-1 For completeness only. buster did had earlier already 3.0.16-1 based

[Git][security-tracker-team/security-tracker][master] Remove description for now rejected CVE-2022-1966

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f59485db by Salvatore Bonaccorso at 2022-06-20T20:37:42+02:00 Remove description for now rejected CVE-2022-1966 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Adjust not-affected reason for CVE-2022-30780

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b89d6aea by Salvatore Bonaccorso at 2022-06-20T20:31:38+02:00 Adjust not-affected reason for CVE-2022-30780 lighttpd 1.4.53 not vulnerable does not explain here why the source is not affected.

[Git][security-tracker-team/security-tracker][master] openjpeg2 fixed in sid

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: b826b03e by Moritz Muehlenhoff at 2022-06-20T20:11:33+02:00 openjpeg2 fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] libjpeg fixed in sid

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: b816c7b7 by Moritz Muehlenhoff at 2022-06-20T20:09:04+02:00 libjpeg fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] freetype fixed in sid

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 6c7b2394 by Moritz Muehlenhoff at 2022-06-20T19:31:15+02:00 freetype fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] gerbv fixed in sid

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: ed468fc1 by Moritz Muehlenhoff at 2022-06-20T19:30:38+02:00 gerbv fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] new squid issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: bcd4ac51 by Moritz Muehlenhoff at 2022-06-20T19:28:55+02:00 new squid issue chafa fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] bugnums

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: a02ac962 by Moritz Muehlenhoff at 2022-06-20T17:42:12+02:00 bugnums - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] CVE-2022-1966: use REJECTED annotation

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 0f3de07d by Emilio Pozuelo Monfort at 2022-06-20T17:28:27+02:00 CVE-2022-1966: use REJECTED annotation - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Stop tracking Intel firmware issues as unfixed, there's not enough information

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 31ae7836 by Moritz Mühlenhoff at 2022-06-20T17:25:39+02:00 Stop tracking Intel firmware issues as unfixed, theres not enough information available and this is causing too much noise - - - - -

[Git][security-tracker-team/security-tracker][master] bugnums

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 640079b2 by Moritz Muehlenhoff at 2022-06-20T17:07:12+02:00 bugnums - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] new cookiecutter issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 4c868706 by Moritz Muehlenhoff at 2022-06-20T16:55:24+02:00 new cookiecutter issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: c681e48e by Moritz Muehlenhoff at 2022-06-20T16:46:43+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] CVE-2022-1966 rejected in favour of CVE-2022-32250

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 38a6514c by Moritz Muehlenhoff at 2022-06-20T16:18:36+02:00 CVE-2022-1966 rejected in favour of CVE-2022-32250 - - - - - 2 changed files: - data/CVE/list - data/DSA/list Changes:

[Git][security-tracker-team/security-tracker][master] bugnums

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: b22442c9 by Moritz Muehlenhoff at 2022-06-20T15:37:15+02:00 bugnums - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Fix CVE-2019-1010065 for sleuthkit

Andreas Rönnquist pushed to branch master at Debian Security Tracker / security-tracker Commits: e3ed4f3b by Andreas Rönnquist at 2022-06-20T15:33:52+02:00 Fix CVE-2019-1010065 for sleuthkit - - - - - 1 changed file: - data/DLA/list Changes: =

Processing baef09b221d088534cbf2a4300e5374fa3db2354 failed

The error message was: reference to unknown bug CVE-2020-1010065 make: *** [Makefile:19: all] Error 1 ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: baef09b2 by Moritz Muehlenhoff at 2022-06-20T15:21:43+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

Processing e3bd4b37f84b07fad8e69d2ae03b9b2a47802762 failed

The error message was: reference to unknown bug CVE-2020-1010065 make: *** [Makefile:19: all] Error 1 ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net

[Git][security-tracker-team/security-tracker][master] sleuthkit DLA

Andreas Rönnquist pushed to branch master at Debian Security Tracker / security-tracker Commits: e3bd4b37 by Andreas Rönnquist at 2022-06-20T15:17:45+02:00 sleuthkit DLA - - - - - 3 changed files: - data/CVE/list - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] new jodd, jupyter-notebook, jupyter-server, gitlab issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 36bc6443 by Moritz Muehlenhoff at 2022-06-20T14:51:57+02:00 new jodd, jupyter-notebook, jupyter-server, gitlab issue new werkzeug non issue - - - - - 1 changed file: - data/CVE/list

[Git][security-tracker-team/security-tracker][master] Reserve DLA-3053-1 for vim

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: dad608af by Markus Koschany at 2022-06-20T14:07:19+02:00 Reserve DLA-3053-1 for vim - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Triage CVE-2021-40633 in giflib for stretch LTS.

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: c5cf2736 by Chris Lamb at 2022-06-20T13:00:50+01:00 Triage CVE-2021-40633 in giflib for stretch LTS. - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Triage CVE-2022-2054 in nuitka for stretch LTS.

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: 114dfae7 by Chris Lamb at 2022-06-20T13:00:07+01:00 Triage CVE-2022-2054 in nuitka for stretch LTS. - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] xpdf n/a

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: e5b1098f by Moritz Muehlenhoff at 2022-06-20T13:46:11+02:00 xpdf n/a nomad n/a - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] new golang-github-blevesearch-bleve non issue (but also asked to RM since it's...

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: fc21c96e by Moritz Muehlenhoff at 2022-06-20T13:40:12+02:00 new golang-github-blevesearch-bleve non issue (but also asked to RM since its orphaned and w/o rdeps) - - - - - 1 changed file: -

[Git][security-tracker-team/security-tracker][master] netcdf fixed in sid

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 6c1103a2 by Moritz Mühlenhoff at 2022-06-20T13:31:40+02:00 netcdf fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] notified MITRE of nftables duplicate for rejection

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: de6f0063 by Moritz Muehlenhoff at 2022-06-20T13:23:43+02:00 notified MITRE of nftables duplicate for rejection bugnums - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] new jpeg-xl, node-got issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: c60d9310 by Moritz Muehlenhoff at 2022-06-20T12:55:05+02:00 new jpeg-xl, node-got issues ruby-octokit n/a - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] new gitlab issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: ce97f2ec by Moritz Muehlenhoff at 2022-06-20T12:47:52+02:00 new gitlab issues - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: ca6c7bfe by Moritz Muehlenhoff at 2022-06-20T12:39:58+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] add placeholder for latest VLC security fixes

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 23fe3c3f by Moritz Muehlenhoff at 2022-06-20T12:19:01+02:00 add placeholder for latest VLC security fixes - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] slurm, vlc DSAs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: d54f6894 by Moritz Mühlenhoff at 2022-06-20T11:58:29+02:00 slurm, vlc DSAs - - - - - 2 changed files: - data/DSA/list - data/dsa-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Remove vim no-dsa tags and triage CVE for stretch

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 1fa7e6b9 by Markus Koschany at 2022-06-20T11:05:51+02:00 Remove vim no-dsa tags and triage CVE for stretch - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d40cecfd by security tracker role at 2022-06-20T08:10:15+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 5c46b102 by Moritz Mühlenhoff at 2022-06-20T10:07:55+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] NFU (concludes external check)

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: f044cbdc by Moritz Mühlenhoff at 2022-06-20T09:56:43+02:00 NFU (concludes external check) - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] CVE-2022-30780/lighttpd not affected

Helmut Grohne pushed to branch master at Debian Security Tracker / security-tracker Commits: 0d0890ff by Glenn Strauss at 2022-06-20T08:29:04+02:00 CVE-2022-30780/lighttpd not affected - - - - - 1 changed file: - data/CVE/list Changes: =