[Git][security-tracker-team/security-tracker][master] Expand TODO item for four CVEs, unclear if specific to OpenAnolis

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d1bf2526 by Salvatore Bonaccorso at 2022-09-09T23:13:49+02:00 Expand TODO item for four CVEs, unclear if specific to OpenAnolis - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update information on CVE-2022-3077 and CVE-2022-2873

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0b7e029b by Salvatore Bonaccorso at 2022-09-09T22:58:23+02:00 Update information on CVE-2022-3077 and CVE-2022-2873 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-3169/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: acd6ce74 by Salvatore Bonaccorso at 2022-09-09T22:49:38+02:00 Add CVE-2022-3169/linux - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-3147/mattermost-server

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f4f8c099 by Salvatore Bonaccorso at 2022-09-09T22:39:59+02:00 Add CVE-2022-3147/mattermost-server - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 20f29a7c by Salvatore Bonaccorso at 2022-09-09T22:39:21+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process one NFU

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: cca8ccb1 by Salvatore Bonaccorso at 2022-09-09T22:32:39+02:00 Process one NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: aeeae369 by security tracker role at 2022-09-09T20:10:22+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Fix typo in CVE identifier for unrar-nonfree entry

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ee4a337a by Salvatore Bonaccorso at 2022-09-09T21:26:58+02:00 Fix typo in CVE identifier for unrar-nonfree entry - - - - - 1 changed file: - data/next-oldstable-point-update.txt Changes:

[Git][security-tracker-team/security-tracker][master] Remove two more CVE associated which are untracked for otherwise for twisted

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1d62d525 by Salvatore Bonaccorso at 2022-09-09T21:21:16+02:00 Remove two more CVE associated which are untracked for otherwise for twisted - - - - - 1 changed file: -

[Git][security-tracker-team/security-tracker][master] Remove one entry which does not belong to the source package

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8674c9ab by Salvatore Bonaccorso at 2022-09-09T21:16:58+02:00 Remove one entry which does not belong to the source package - - - - - 1 changed file: - data/next-oldstable-point-update.txt

[Git][security-tracker-team/security-tracker][master] rust-anymap removed from sid

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 2a929232 by Moritz Muehlenhoff at 2022-09-09T21:10:30+02:00 rust-anymap removed from sid - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Update information on CVE-2020-28589/tinyobjloader

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4262d9bd by Salvatore Bonaccorso at 2022-09-09T17:48:29+02:00 Update information on CVE-2020-28589/tinyobjloader - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add upstream tag information for two upstream commits for tinyexr

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1b0a9a8f by Salvatore Bonaccorso at 2022-09-09T17:43:12+02:00 Add upstream tag information for two upstream commits for tinyexr - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add pull request reference for CVE-2022-34300

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f5cc4d53 by Salvatore Bonaccorso at 2022-09-09T17:42:28+02:00 Add pull request reference for CVE-2022-34300 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] two tinyexr issues n/a

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: f3ffe012 by Moritz Muehlenhoff at 2022-09-09T17:04:27+02:00 two tinyexr issues n/a - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] add webkit exploit reference

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 69128059 by Moritz Muehlenhoff at 2022-09-09T17:00:17+02:00 add webkit exploit reference - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Reserve DLA-3101-1 for libxslt

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: f85c5a06 by Emilio Pozuelo Monfort at 2022-09-09T14:55:49+02:00 Reserve DLA-3101-1 for libxslt - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Re add rails to dla-needed.txt, regression

/dla-needed.txt = @@ -121,6 +121,12 @@ poppler (Markus Koschany) python-oslo.utils (Chris Lamb) NOTE: 20220904: Programming language: Python. -- +rails (Abhijith PA) + NOTE: 20220909: Regression on 2:5.2.2.1+dfsg-1+deb10u4 (abhijith) + NOTE: 20220909: Two

[Git][security-tracker-team/security-tracker][master] bullseye triage

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: cacc85a3 by Moritz Muehlenhoff at 2022-09-09T11:49:27+02:00 bullseye triage - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2019-25076/openvswitch

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f5099df7 by Salvatore Bonaccorso at 2022-09-09T11:36:38+02:00 Add CVE-2019-25076/openvswitch - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-40299/singular

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: eb455f02 by Salvatore Bonaccorso at 2022-09-09T10:27:38+02:00 Add CVE-2022-40299/singular - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: dc45211d by Salvatore Bonaccorso at 2022-09-09T10:25:54+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-40307/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 829a783e by Salvatore Bonaccorso at 2022-09-09T10:19:08+02:00 Add CVE-2022-40307/linux - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 57788dbe by security tracker role at 2022-09-09T08:10:16+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Added mariadb-10.3 to dla-needed. There are no known urgent CVEs but the share...

+ NOTE: 20220909: Programming language: C. + NOTE: 20220909: Could not find any urgent issues but the share volume of issues should warrant a security update. + NOTE: 20220909: For bullseye the likely outcome is that the package should be fixed in a point release. +-- mbedtls NOTE

[Git][security-tracker-team/security-tracker][master] Added paramiko to dla-needed.

-needed.txt = @@ -90,6 +90,9 @@ openexr NOTE: 20220904: Programming language: C++. NOTE: 20220904: Should be synced with Stretch. (apo) -- +paramiko + NOTE: 20220909: Programming language: Python. +-- pcs (Valentin Vidic) NOTE: 20220905: Programming

[Git][security-tracker-team/security-tracker][master] Review list for upcoming bullseye point release

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7eb18346 by Salvatore Bonaccorso at 2022-09-09T08:11:33+02:00 Review list for upcoming bullseye point release - - - - - 1 changed file: - data/next-point-update.txt Changes:

[Git][security-tracker-team/security-tracker][master] Updated the order of how issues are shown in lts-cve-triage command. The...

Ola Lundqvist pushed to branch master at Debian Security Tracker / security-tracker Commits: 4686a5af by Ola Lundqvist at 2022-09-09T08:03:12+02:00 Updated the order of how issues are shown in lts-cve-triage command. The reason is that it is more important to triage new potentially severe