[Git][security-tracker-team/security-tracker][master] Add two CVE-2023-3151{7,8}/teeworlds

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a0f11619 by Salvatore Bonaccorso at 2023-05-24T07:57:06+02:00 Add two CVE-2023-3151{7,8}/teeworlds - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-31669/wabt

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 317a77e3 by Salvatore Bonaccorso at 2023-05-24T07:50:41+02:00 Add CVE-2023-31669/wabt - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process one NFU in Spring Boot

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 337da7fa by Salvatore Bonaccorso at 2023-05-24T07:44:19+02:00 Process one NFU in Spring Boot - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-32695/node-socket.io-parser

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: df3897bb by Salvatore Bonaccorso at 2023-05-24T07:41:57+02:00 Add CVE-2023-32695/node-socket.io-parser - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] add sniproxy to dsa-needed

Aron Xu pushed to branch master at Debian Security Tracker / security-tracker Commits: f513fcac by Aron Xu at 2023-05-24T10:59:03+08:00 add sniproxy to dsa-needed - - - - - 1 changed file: - data/dsa-needed.txt Changes: = data/dsa-needed.txt

[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2022-47516/sofia-sip via unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b87054a1 by Salvatore Bonaccorso at 2023-05-23T22:49:19+02:00 Track fixed version for CVE-2022-47516/sofia-sip via unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add some new piwigo issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4029192d by Salvatore Bonaccorso at 2023-05-23T22:39:15+02:00 Add some new piwigo issues - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: db5ee8b0 by Salvatore Bonaccorso at 2023-05-23T22:29:54+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process one NFU

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 57343b44 by Salvatore Bonaccorso at 2023-05-23T22:26:31+02:00 Process one NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] bookworm triage

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 54f50b7a by Moritz Mühlenhoff at 2023-05-23T22:16:30+02:00 bookworm triage - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1c57a9b3 by security tracker role at 2023-05-23T20:12:15+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Mark two sngrep issues as unimportant

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b64bd426 by Salvatore Bonaccorso at 2023-05-23T22:09:12+02:00 Mark two sngrep issues as unimportant - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2023-33297/bitcoin

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 454c96e9 by Salvatore Bonaccorso at 2023-05-23T21:46:36+02:00 Add Debian bug reference for CVE-2023-33297/bitcoin - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] bookworm triage

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 0fd31e5c by Moritz Mühlenhoff at 2023-05-23T21:11:20+02:00 bookworm triage - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] 5 commits: Triage CVE-2023-32784 in keepass2 for buster LTS.

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: 6ce0fae9 by Chris Lamb at 2023-05-23T10:15:56-07:00 Triage CVE-2023-32784 in keepass2 for buster LTS. - - - - - 2f365699 by Chris Lamb at 2023-05-23T10:16:19-07:00 Triage CVE-2023-2700 in libvirt for

[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage c-ares for buster LTS (CVE-2023-31130 & CVE-2023-32067)

. +-- +c-ares + NOTE: 20230523: Programming language: C. + NOTE: 20230523: VCS: https://salsa.debian.org/lts-team/packages/c-ares.git -- cairosvg NOTE: 20230323: Programming language: Python. View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit

[Git][security-tracker-team/security-tracker][master] Triage CVE-2023-2837, CVE-2023-2838, CVE-2023-2839 & CVE-2023-2840 in gpac for buster LTS.

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: 083d060f by Chris Lamb at 2023-05-23T10:12:33-07:00 Triage CVE-2023-2837, CVE-2023-2838, CVE-2023-2839 CVE-2023-2840 in gpac for buster LTS. - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Track proposed update for mujs via bullseye-pu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 794142e6 by Salvatore Bonaccorso at 2023-05-23T15:39:09+02:00 Track proposed update for mujs via bullseye-pu - - - - - 1 changed file: - data/next-point-update.txt Changes:

[Git][security-tracker-team/security-tracker][master] Mark CVE-2021-33797/mujs as no-dsa

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 615a884d by Salvatore Bonaccorso at 2023-05-23T15:38:19+02:00 Mark CVE-2021-33797/mujs as no-dsa - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] bookworm triage

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 4e7e8196 by Moritz Mühlenhoff at 2023-05-23T15:37:10+02:00 bookworm triage - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Track proposed updates for curl via bullseye-pu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9b752d73 by Salvatore Bonaccorso at 2023-05-23T15:35:04+02:00 Track proposed updates for curl via bullseye-pu - - - - - 1 changed file: - data/next-point-update.txt Changes:

[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2023-24329/python: buster ignored + link follow-up fix

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker Commits: 44207d14 by Sylvain Beucler at 2023-05-23T14:06:51+02:00 CVE-2023-24329/python: buster ignored + link follow-up fix - - - - - 81aaacbb by Sylvain Beucler at 2023-05-23T14:09:23+02:00

[Git][security-tracker-team/security-tracker][master] CVE-2022-0391/python: buster ignored + clarifications

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker Commits: 8e00ad01 by Sylvain Beucler at 2023-05-23T13:31:48+02:00 CVE-2022-0391/python: buster ignored + clarifications In particular my python3.5/stretch triage led Ubuntu to believe the regression was

[Git][security-tracker-team/security-tracker][master] 2 commits: Process some more NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3d1f185a by Salvatore Bonaccorso at 2023-05-23T12:31:24+02:00 Process some more NFUs - - - - - dae66a11 by Salvatore Bonaccorso at 2023-05-23T12:31:25+02:00 Add CVE-2023-25440/civicrm - - - -

[Git][security-tracker-team/security-tracker][master] bookworm triage

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 37c9243b by Moritz Mühlenhoff at 2023-05-23T12:30:03+02:00 bookworm triage - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-33297/bitcoin

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: bb76e927 by Salvatore Bonaccorso at 2023-05-23T12:26:38+02:00 Add CVE-2023-33297/bitcoin - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-31670/wabt

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4093c20b by Salvatore Bonaccorso at 2023-05-23T12:24:48+02:00 Add CVE-2023-31670/wabt - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Mark CVE-2023-1601 as unimportant

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2c41a0e1 by Salvatore Bonaccorso at 2023-05-23T12:15:36+02:00 Mark CVE-2023-1601 as unimportant - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] libssh DSA

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 95927ac0 by Moritz Mühlenhoff at 2023-05-23T11:23:25+02:00 libssh DSA - - - - - 2 changed files: - data/DSA/list - data/dsa-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 7376c9e1 by Moritz Mühlenhoff at 2023-05-23T11:14:25+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 04633fab by security tracker role at 2023-05-23T08:12:01+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Track fixed version for older nghttp2 issue

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6e87b367 by Salvatore Bonaccorso at 2023-05-23T08:09:20+02:00 Track fixed version for older nghttp2 issue - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2023-32573 via unstable for qtsvg-opensource-src

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: bc106ca6 by Salvatore Bonaccorso at 2023-05-23T08:05:18+02:00 Track fixed version for CVE-2023-32573 via unstable for qtsvg-opensource-src - - - - - 1 changed file: - data/CVE/list