[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4e61e940 by security tracker role at 2023-04-10T20:10:22+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add new upx-ucl issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0494c337 by Salvatore Bonaccorso at 2023-04-10T21:34:15+02:00 Add new upx-ucl issues Note for reviewers, the actuall unfixed status and the assessment on severity needs still to be done. - -

[Git][security-tracker-team/security-tracker][master] Add new centreon-web issues, itp'ed

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a89d4e16 by Salvatore Bonaccorso at 2023-04-10T21:33:38+02:00 Add new centreon-web issues, itped - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e0ce7815 by Salvatore Bonaccorso at 2023-04-10T21:33:12+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Track source-wise fixes for CVE-2023-1801 in experimental

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 79489b85 by Salvatore Bonaccorso at 2023-04-10T21:15:21+02:00 Track source-wise fixes for CVE-2023-1801 in experimental - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] 2 commits: Revert "Adjust metadata on experimental version for CVE-2023-27476/owslib"

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5fca3c35 by Salvatore Bonaccorso at 2023-04-10T21:03:12+02:00 Revert Adjust metadata on experimental version for CVE-2023-27476/owslib This reverts commit

[Git][security-tracker-team/security-tracker][master] Add upstream tag information for CVE-2023-27476

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c2850496 by Salvatore Bonaccorso at 2023-04-10T21:01:55+02:00 Add upstream tag information for CVE-2023-27476 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Adjust metadata on experimental version for CVE-2023-27476/owslib

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 71bb1652 by Salvatore Bonaccorso at 2023-04-10T21:01:17+02:00 Adjust metadata on experimental version for CVE-2023-27476/owslib - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add upstream tag information for CVE-2023-29415

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c65fb347 by Salvatore Bonaccorso at 2023-04-10T20:43:06+02:00 Add upstream tag information for CVE-2023-29415 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add upstream tag information for upstream commits for CVE-2023-26485 and CVE-2023-24824

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: bc78bfa5 by Salvatore Bonaccorso at 2023-04-10T20:40:59+02:00 Add upstream tag information for upstream commits for CVE-2023-26485 and CVE-2023-24824 - - - - - 1 changed file: -

[Git][security-tracker-team/security-tracker][master] Drop suffix dots

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: bf074276 by Salvatore Bonaccorso at 2023-04-10T20:38:22+02:00 Drop suffix dots - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] LTS: reclaim wordpress in dla-needed.txt

Guilhem Moulin pushed to branch master at Debian Security Tracker / security-tracker Commits: 6cb0bd4a by Guilhem Moulin at 2023-04-10T20:26:56+02:00 LTS: reclaim wordpress in dla-needed.txt - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Claim curl in dla-needed.txt

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 3374acc4 by Markus Koschany at 2023-04-10T20:19:23+02:00 Claim curl in dla-needed.txt - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Reserve DLA-3388-1 for keepalived

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: a2f46d09 by Markus Koschany at 2023-04-10T19:58:11+02:00 Reserve DLA-3388-1 for keepalived - - - - - 3 changed files: - data/CVE/list - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] bookworm triage

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 7c04442c by Moritz Muehlenhoff at 2023-04-10T19:53:01+02:00 bookworm triage - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] guestfs-tools fixed

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 09a4835b by Moritz Muehlenhoff at 2023-04-10T19:51:48+02:00 guestfs-tools fixed - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] bugnums

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: c6e1434c by Moritz Muehlenhoff at 2023-04-10T19:51:03+02:00 bugnums - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] tiff non issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 1fe65e04 by Moritz Muehlenhoff at 2023-04-10T19:37:30+02:00 tiff non issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] bugnums

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 94342456 by Moritz Muehlenhoff at 2023-04-10T18:28:17+02:00 bugnums - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] add one commit reference for bzip3

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: b0ebdd14 by Moritz Muehlenhoff at 2023-04-10T18:24:34+02:00 add one commit reference for bzip3 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] bookworm triage

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: b7f29b3f by Moritz Muehlenhoff at 2023-04-10T18:16:57+02:00 bookworm triage - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] new cmark-gfm issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 480f3f17 by Moritz Muehlenhoff at 2023-04-10T17:50:51+02:00 new cmark-gfm issues - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] CVE-2022-46768/zabbix does not affect bullseye and buster, vulnerable feature...

Tobias Frost pushed to branch master at Debian Security Tracker / security-tracker Commits: ca530a19 by Tobias Frost at 2023-04-10T17:44:12+02:00 CVE-2022-46768/zabbix does not affect bullseye and buster, vulnerable feature introduced in 5.4.0 only. Vulnerable feature ticket:

[Git][security-tracker-team/security-tracker][master] ignore CVE-2022-43515/zabbix for buster, as it is ignored on all other releases as well.

Tobias Frost pushed to branch master at Debian Security Tracker / security-tracker Commits: e610a463 by Tobias Frost at 2023-04-10T17:34:46+02:00 ignore CVE-2022-43515/zabbix for buster, as it is ignored on all other releases as well. - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] CVE-2022-40626/zabbix not affecting buster.

Tobias Frost pushed to branch master at Debian Security Tracker / security-tracker Commits: 53539005 by Tobias Frost at 2023-04-10T17:30:54+02:00 CVE-2022-40626/zabbix not affecting buster. very likely introduced by commit

[Git][security-tracker-team/security-tracker][master] bookworm triage

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 10a900d6 by Moritz Muehlenhoff at 2023-04-10T17:21:32+02:00 bookworm triage - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] 2 commits: LTS: WIP two packages

. NOTE: 20221231: Few users. Low prio. (opal). NOTE: 20230206: VCS: https://salsa.debian.org/lts-team/packages/389-ds-base.git - NOTE: 20230227: test new CI + NOTE: 20230327: test new CI + NOTE: 20230410: WIP -- apache2 (rouca) NOTE: 20230312: Programming language: C. @@ -25,7 +26,7

[Git][security-tracker-team/security-tracker][master] Track nvidia-graphics-drivers-tesla-470 fixes via bullseye-pu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: cd9c051a by Salvatore Bonaccorso at 2023-04-10T16:29:10+02:00 Track nvidia-graphics-drivers-tesla-470 fixes via bullseye-pu - - - - - 1 changed file: - data/next-point-update.txt Changes:

[Git][security-tracker-team/security-tracker][master] Track nvidia-graphics-drivers fixes via bullseye-pu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f5c1b989 by Salvatore Bonaccorso at 2023-04-10T16:27:14+02:00 Track nvidia-graphics-drivers fixes via bullseye-pu - - - - - 1 changed file: - data/next-point-update.txt Changes:

[Git][security-tracker-team/security-tracker][master] CVE-2022-23132 is not affecting buster.

Tobias Frost pushed to branch master at Debian Security Tracker / security-tracker Commits: 30f8383b by Tobias Frost at 2023-04-10T16:04:12+02:00 CVE-2022-23132 is not affecting buster. - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add haproxy to dsa-needed list

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d37db5ed by Salvatore Bonaccorso at 2023-04-10T15:55:09+02:00 Add haproxy to dsa-needed list - - - - - 1 changed file: - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] 2 commits: Adjust upstream commit reference according to pull request and commit for netatalk

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 875ef7ef by Salvatore Bonaccorso at 2023-04-10T15:14:31+02:00 Adjust upstream commit reference according to pull request and commit for netatalk - - - - - 903f9de3 by Salvatore Bonaccorso at

[Git][security-tracker-team/security-tracker][master] new netatalk issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: fd7db7e9 by Moritz Muehlenhoff at 2023-04-10T15:01:13+02:00 new netatalk issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2023-28428/ippsample

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: eeb00eca by Salvatore Bonaccorso at 2023-04-10T14:57:26+02:00 Add Debian bug reference for CVE-2023-28428/ippsample - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] new llvm non issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: d1acaef6 by Moritz Muehlenhoff at 2023-04-10T14:56:45+02:00 new llvm non issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] new otrs issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: b2d47ed6 by Moritz Muehlenhoff at 2023-04-10T14:54:33+02:00 new otrs issues - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-36440/frr

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f4fe2b71 by Salvatore Bonaccorso at 2023-04-10T14:45:59+02:00 Add CVE-2022-36440/frr - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2023-26916/libyang2

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d95861a6 by Salvatore Bonaccorso at 2023-04-10T14:38:39+02:00 Add Debian bug reference for CVE-2023-26916/libyang2 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2023-26112/configobj

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5b8dd88d by Salvatore Bonaccorso at 2023-04-10T14:34:08+02:00 Add Debian bug reference for CVE-2023-26112/configobj - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug references for CVE-2023-2447{2,3} and CVE-2023-22845

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 818195f8 by Salvatore Bonaccorso at 2023-04-10T14:31:15+02:00 Add Debian bug references for CVE-2023-2447{2,3} and CVE-2023-22845 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2023-0842/node-xml2js

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5af691c4 by Salvatore Bonaccorso at 2023-04-10T14:21:38+02:00 Add Debian bug reference for CVE-2023-0842/node-xml2js - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 8f22923d by Moritz Muehlenhoff at 2023-04-10T14:16:43+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add references to upstream fix for CVE-2023-0842/node-xml2js

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 02cb1e76 by Salvatore Bonaccorso at 2023-04-10T14:10:29+02:00 Add references to upstream fix for CVE-2023-0842/node-xml2js - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add fixed version via unstable for CVE-2022-25927

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 98bbb895 by Salvatore Bonaccorso at 2023-04-10T14:00:58+02:00 Add fixed version via unstable for CVE-2022-25927 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 52e91855 by Moritz Mühlenhoff at 2023-04-10T13:43:36+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Track fixed version for golang-1.19 issues via unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ac65735a by Salvatore Bonaccorso at 2023-04-10T13:26:31+02:00 Track fixed version for golang-1.19 issues via unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim lldpd.

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: 101b5768 by Chris Lamb at 2023-04-10T11:47:12+01:00 data/dla-needed.txt: Claim lldpd. - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] 2 commits: external-check: Handle vendor entries with additional vendor security prefix

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b8e7bfe8 by Salvatore Bonaccorso at 2023-04-10T11:30:38+02:00 external-check: Handle vendor entries with additional vendor security prefix Additionally to the vendored entries addressed in

[Git][security-tracker-team/security-tracker][master] Reserve DLA-3387-2 for udisks2

Tobias Frost pushed to branch master at Debian Security Tracker / security-tracker Commits: 05c65f6b by Tobias Frost at 2023-04-10T11:37:50+02:00 Reserve DLA-3387-2 for udisks2 - - - - - 1 changed file: - data/DLA/list Changes: = data/DLA/list

[Git][security-tracker-team/security-tracker][master] Reserve DSA-5384-1 for openimageio

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 3fe4043d by Markus Koschany at 2023-04-10T11:11:54+02:00 Reserve DSA-5384-1 for openimageio - - - - - 2 changed files: - data/DSA/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-30456/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4577bd1f by Salvatore Bonaccorso at 2023-04-10T10:15:18+02:00 Add CVE-2023-30456/linux - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: cd236c59 by security tracker role at 2023-04-10T08:10:18+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Track fixed version for various nvidia-graphics-drivers-tesla-470 CVEs via unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5ffb4c6f by Salvatore Bonaccorso at 2023-04-10T09:38:15+02:00 Track fixed version for various nvidia-graphics-drivers-tesla-470 CVEs via unstable - - - - - 1 changed file: - data/CVE/list

[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2021-21897/cloudcompare

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 98709b0c by Salvatore Bonaccorso at 2023-04-10T09:36:12+02:00 Track fixed version for CVE-2021-21897/cloudcompare - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9e1df939 by Salvatore Bonaccorso at 2023-04-10T08:02:00+02:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list