[Git][security-tracker-team/security-tracker][master] Track fixed firefox-esr issues via unstable for mfsa2022-48

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c8040003 by Salvatore Bonaccorso at 2022-11-16T06:50:53+01:00 Track fixed firefox-esr issues via unstable for mfsa2022-48 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2022-39327: windows-only, mark as not-affected

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 52abb627 by Luca Boccassi at 2022-11-15T22:34:31+00:00 CVE-2022-39327: windows-only, mark as not-affected - - - - - 71f43998 by Salvatore Bonaccorso at 2022-11-16T05:49:08+00:00 Merge branch

[Git][security-tracker-team/security-tracker] Deleted branch bluca/CVE-2022-39327

Luca Boccassi deleted branch bluca/CVE-2022-39327 at Debian Security Tracker / security-tracker -- You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list

[Git][security-tracker-team/security-tracker] Pushed new branch bluca/CVE-2022-39327

Luca Boccassi pushed new branch bluca/CVE-2022-39327 at Debian Security Tracker / security-tracker -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/tree/bluca/CVE-2022-39327 You're receiving this email because of your account on salsa.debian.org.

[Git][security-tracker-team/security-tracker][master] Track fixed version for thunderbird issues for mfsa2022-49

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 15ce08c3 by Salvatore Bonaccorso at 2022-11-15T23:40:04+01:00 Track fixed version for thunderbird issues for mfsa2022-49 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Mark two CVEs for node-loader-utils as no-dsa

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0c5d1e30 by Salvatore Bonaccorso at 2022-11-15T22:59:23+01:00 Mark two CVEs for node-loader-utils as no-dsa They are additionally already proposed to be fixed via the next bullseye point

[Git][security-tracker-team/security-tracker][master] Track two more CVEs for node-loader-utils update for bullseye-pu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 98faca81 by Salvatore Bonaccorso at 2022-11-15T22:58:23+01:00 Track two more CVEs for node-loader-utils update for bullseye-pu - - - - - 1 changed file: - data/next-point-update.txt

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for new heimdal issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 44ffd9f0 by Salvatore Bonaccorso at 2022-11-15T22:39:43+01:00 Add Debian bug reference for new heimdal issues - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add temporary description for CVE-2022-42898

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 42c2c1b0 by Salvatore Bonaccorso at 2022-11-15T22:15:28+01:00 Add temporary description for CVE-2022-42898 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add heimdal to dsa-needed list

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 471c0e63 by Salvatore Bonaccorso at 2022-11-15T22:12:20+01:00 Add heimdal to dsa-needed list - - - - - 1 changed file: - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Track upstream commits for CVE-2019-14870/heimdal

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: cdb148e3 by Salvatore Bonaccorso at 2022-11-15T22:11:41+01:00 Track upstream commits for CVE-2019-14870/heimdal - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-44758/heimdal

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9a8ce74d by Salvatore Bonaccorso at 2022-11-15T22:11:02+01:00 Add CVE-2021-44758/heimdal - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Record heimdal commits for CVE-2022-3437

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 46128e4f by Salvatore Bonaccorso at 2022-11-15T22:10:32+01:00 Record heimdal commits for CVE-2022-3437 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Reference heimdal commit for CVE-2022-42898

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 80058933 by Salvatore Bonaccorso at 2022-11-15T22:10:06+01:00 Reference heimdal commit for CVE-2022-42898 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-44640/heimdal

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c17492c4 by Salvatore Bonaccorso at 2022-11-15T22:09:39+01:00 Add CVE-2022-44640/heimdal - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 20338cb1 by Salvatore Bonaccorso at 2022-11-15T21:38:40+01:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process one NFU

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7db20d2c by Salvatore Bonaccorso at 2022-11-15T21:22:50+01:00 Process one NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Mark CVE-2021-3981/grub2 as no-dsa

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 62bd5dec by Salvatore Bonaccorso at 2022-11-15T21:19:01+01:00 Mark CVE-2021-3981/grub2 as no-dsa - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Update status for CVE-2021-3981/grub2

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e26a80cc by Salvatore Bonaccorso at 2022-11-15T21:15:45+01:00 Update status for CVE-2021-3981/grub2 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6ac24945 by security tracker role at 2022-11-15T20:10:18+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] nginx DSA

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: c77f4984 by Moritz Mühlenhoff at 2022-11-15T21:04:22+01:00 nginx DSA - - - - - 2 changed files: - data/DSA/list - data/dsa-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Add jackson-databind to dsa-needed list

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 93664f30 by Salvatore Bonaccorso at 2022-11-15T20:56:20+01:00 Add jackson-databind to dsa-needed list - - - - - 1 changed file: - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Reserve DSA number for grub2 update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0eae5d3c by Salvatore Bonaccorso at 2022-11-15T20:19:35+01:00 Reserve DSA number for grub2 update - - - - - 2 changed files: - data/DSA/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] 2 commits: Add additional bug cross reference for wordpress 5.9.2 update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 098c6088 by Salvatore Bonaccorso at 2022-11-15T20:14:03+01:00 Add additional bug cross reference for wordpress 5.9.2 update - - - - - e512a817 by Salvatore Bonaccorso at

[Git][security-tracker-team/security-tracker][master] Track fixed version for grub2 issues via unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c398ea7d by Salvatore Bonaccorso at 2022-11-15T20:06:35+01:00 Track fixed version for grub2 issues via unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] lts: take firefox-esr and thunderbird

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 0dc432ac by Emilio Pozuelo Monfort at 2022-11-15T19:51:04+01:00 lts: take firefox-esr and thunderbird - - - - - 1 changed file: - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] lts: reclaim php7.3

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: f73f6a04 by Emilio Pozuelo Monfort at 2022-11-15T19:49:29+01:00 lts: reclaim php7.3 Accidentally removed in 9c1e35c4. - - - - - 1 changed file: - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] new thunderbird issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 7956dde2 by Moritz Muehlenhoff at 2022-11-15T19:38:37+01:00 new thunderbird issues - - - - - 2 changed files: - data/CVE/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] new firefox-esr issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 3f4b9a27 by Moritz Muehlenhoff at 2022-11-15T19:35:24+01:00 new firefox-esr issues - - - - - 2 changed files: - data/CVE/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] new firefox issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 5d346f0b by Moritz Muehlenhoff at 2022-11-15T19:31:31+01:00 new firefox issues - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] 2 commits: Add two new grub2 issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9d53217d by Salvatore Bonaccorso at 2022-11-15T19:04:27+01:00 Add two new grub2 issues - - - - - 8c44ce2f by Salvatore Bonaccorso at 2022-11-15T19:05:17+01:00 Add grub2 to dsa-needed list - -

[Git][security-tracker-team/security-tracker][master] Reference upstream commits for CVE-2022-42898/krb5

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 77adaae9 by Salvatore Bonaccorso at 2022-11-15T18:51:43+01:00 Reference upstream commits for CVE-2022-42898/krb5 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Reserve DSA-5279-1 for wordpress

Sebastien Delafond pushed to branch master at Debian Security Tracker / security-tracker Commits: 6c76dfda by Sébastien Delafond at 2022-11-15T18:28:37+01:00 Reserve DSA-5279-1 for wordpress - - - - - 2 changed files: - data/DSA/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] samba fixed in sid

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: e153726f by Moritz Muehlenhoff at 2022-11-15T18:15:45+01:00 samba fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] dla-needed.txt: Update note for python-django.

tion: Chris Lamb is the maintainer. NOTE: 20221103: Re-added pre-20221031 comments from Git and reclaimed; will upload at least CVE-2022-28346 soon. (lamby) NOTE: 20221104: Uploaded with three more CVEs: CVE-2022-28346 CVE-2021-45115 CVE-2021-45116 (lamby) + NOTE: 20221115: Will upload sho

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-42898/{heimdal,krb5,samba}

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d4f3e7f0 by Salvatore Bonaccorso at 2022-11-15T16:57:46+01:00 Add CVE-2022-42898/{heimdal,krb5,samba} - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] lts: take php7.3

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: c3f1bee5 by Emilio Pozuelo Monfort at 2022-11-15T15:46:37+01:00 lts: take php7.3 - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 317d7839 by Moritz Muehlenhoff at 2022-11-15T15:01:42+01:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Claim wordpress

Sebastien Delafond pushed to branch master at Debian Security Tracker / security-tracker Commits: 94a8d3c4 by Sébastien Delafond at 2022-11-15T12:40:06+01:00 Claim wordpress - - - - - 1 changed file: - data/dsa-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] nautilus non issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: da3928db by Moritz Muehlenhoff at 2022-11-15T12:39:00+01:00 nautilus non issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 570215af by Salvatore Bonaccorso at 2022-11-15T09:46:23+01:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6f2f5f32 by Salvatore Bonaccorso at 2022-11-15T09:41:43+01:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: eb0c7653 by security tracker role at 2022-11-15T08:10:19+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list