[Git][security-tracker-team/security-tracker][master] Add initial tracking for CVE-2023-29409/golang

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3a84d8cf by Salvatore Bonaccorso at 2023-08-02T07:40:26+02:00 Add initial tracking for CVE-2023-29409/golang - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Replace branch names with now existing tags for openssl commits

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2c135d59 by Salvatore Bonaccorso at 2023-08-02T07:33:08+02:00 Replace branch names with now existing tags for openssl commits - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for firefox-esr issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8b464342 by Salvatore Bonaccorso at 2023-08-02T07:27:32+02:00 Track fixed version via unstable for firefox-esr issues - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Revert "bugs.py: Hint towards a typo issue on check"

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0fb7fd76 by Salvatore Bonaccorso at 2023-08-02T07:24:40+02:00 Revert bugs.py: Hint towards a typo issue on check This reverts commit 63a9aa4515f4335203346034dcf842b067ab0fcc. Samuel Henrique

[Git][security-tracker-team/security-tracker][master] 2 commits: Triage CVE-2023-30588/nodejs for buster.

Guilhem Moulin pushed to branch master at Debian Security Tracker / security-tracker Commits: 8049fa63 by Guilhem Moulin at 2023-08-02T02:55:21+02:00 Triage CVE-2023-30588/nodejs for buster. - - - - - 507a68b1 by Guilhem Moulin at 2023-08-02T02:56:07+02:00 CVE-2023-30581/nodejs: Link to

[Git][security-tracker-team/security-tracker][master] Triage CVE-2023-30581/nodejs for buster.

Guilhem Moulin pushed to branch master at Debian Security Tracker / security-tracker Commits: 5ddee3eb by Guilhem Moulin at 2023-08-02T02:39:43+02:00 Triage CVE-2023-30581/nodejs for buster. v10.x doesnt support policy manifests (nor ‘--experimental-policy=’ / ‘--policy-*=’ options). - - -

[Git][security-tracker-team/security-tracker][master] openssl fixed in sid

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: e3f9c293 by Moritz Mühlenhoff at 2023-08-01T23:45:18+02:00 openssl fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b5d46b39 by Salvatore Bonaccorso at 2023-08-01T23:05:24+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 510617e6 by security tracker role at 2023-08-01T20:12:30+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] LTS: reclaim qt4-x11

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: f7d8d726 by Roberto C. Sánchez at 2023-08-01T15:47:05-04:00 LTS: reclaim qt4-x11 - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Add firefox-esr to dsa-needed list

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: cc1149cf by Salvatore Bonaccorso at 2023-08-01T21:45:30+02:00 Add firefox-esr to dsa-needed list - - - - - 1 changed file: - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add missing CVE-2023-4058 from mfsa2023-4058

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0ae86b21 by Salvatore Bonaccorso at 2023-08-01T21:44:35+02:00 Add missing CVE-2023-4058 from mfsa2023-4058 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add firefox-esr issues from mfsa2023-30 and mfsa2023-31

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c0817f39 by Salvatore Bonaccorso at 2023-08-01T21:40:04+02:00 Add firefox-esr issues from mfsa2023-30 and mfsa2023-31 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add firefox issues from mfsa2023-29

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b978b385 by Salvatore Bonaccorso at 2023-08-01T21:31:02+02:00 Add firefox issues from mfsa2023-29 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Associate CVE-2023-38060 with znuny

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a8bb0a49 by Salvatore Bonaccorso at 2023-08-01T21:12:23+02:00 Associate CVE-2023-38060 with znuny - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] bugs.py: Hint towards a typo issue on check

Samuel Henrique pushed to branch master at Debian Security Tracker / security-tracker Commits: 63a9aa45 by Samuel Henrique at 2023-08-01T20:05:20+01:00 bugs.py: Hint towards a typo issue on check - - - - - 1 changed file: - lib/python/bugs.py Changes:

[Git][security-tracker-team/security-tracker][master] CVE-2022-1615: Add 'Introduced by' and mark buster as not affected

Samuel Henrique pushed to branch master at Debian Security Tracker / security-tracker Commits: ea2e3f62 by Samuel Henrique at 2023-08-01T20:01:23+01:00 CVE-2022-1615: Add Introduced by and mark buster as not affected - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] CVE-2023-32732/grpc: slight clarification

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker Commits: 865da069 by Sylvain Beucler at 2023-08-01T19:53:11+02:00 CVE-2023-32732/grpc: slight clarification - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Update information on CVE-2023-30549

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a2732981 by Salvatore Bonaccorso at 2023-08-01T18:13:24+02:00 Update information on CVE-2023-30549 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] new ffmpeg issue (originally from Chromium)

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 8aeaf622 by Moritz Mühlenhoff at 2023-08-01T17:12:12+02:00 new ffmpeg issue (originally from Chromium) - - - - - 2 changed files: - data/CVE/list - data/DSA/list Changes:

[Git][security-tracker-team/security-tracker][master] Update notes for CVE-2023-30549

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8671af22 by Salvatore Bonaccorso at 2023-08-01T17:10:14+02:00 Update notes for CVE-2023-30549 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add note to docker.io in dla-needed.txt

/07/msg00013.html + NOTE: 20230801: rouca and santiago testing the swarm overlay network (including current buster version) -- dogecoin NOTE: 20230619: Added by Front-Desk (Beuc) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit

[Git][security-tracker-team/security-tracker][master] "new" chromium issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 9dc4f83c by Moritz Mühlenhoff at 2023-08-01T16:22:10+02:00 new chromium issues - - - - - 2 changed files: - data/CVE/list - data/DSA/list Changes: =

[Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: 4bcb8a1f by Roberto C. Sánchez at 2023-08-01T09:47:14-04:00 semi-automatic unclaim after 2 weeks of inactivity Signed-off-by: Roberto C. Sánchez robe...@connexer.com - - - - - 1 changed file:

[Git][security-tracker-team/security-tracker][master] fix email address format

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: c489f6e1 by Roberto C. Sánchez at 2023-08-01T09:43:27-04:00 fix email address format - - - - - 1 changed file: - org/lts-frontdesk.2023.txt Changes: =

[Git][security-tracker-team/security-tracker][master] "new" chromium issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: a06850ba by Moritz Mühlenhoff at 2023-08-01T14:29:34+02:00 new chromium issues - - - - - 2 changed files: - data/CVE/list - data/DSA/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add upstream tag information for CVE-2023-3750/libvirt

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ac18edd1 by Salvatore Bonaccorso at 2023-08-01T14:18:21+02:00 Add upstream tag information for CVE-2023-3750/libvirt - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] "new" chromium issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 2b2b63a0 by Moritz Mühlenhoff at 2023-08-01T14:12:03+02:00 new chromium issues - - - - - 2 changed files: - data/CVE/list - data/DSA/list Changes: =

[Git][security-tracker-team/security-tracker][master] Track fixes for llvm-toolchain-15 via unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 062b3cfb by Salvatore Bonaccorso at 2023-08-01T13:46:07+02:00 Track fixes for llvm-toolchain-15 via unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] "new" chromium issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 13e603c7 by Moritz Mühlenhoff at 2023-08-01T13:43:56+02:00 new chromium issues - - - - - 2 changed files: - data/CVE/list - data/DSA/list Changes: =

[Git][security-tracker-team/security-tracker][master] "new" chromium issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 9ef7656b by Moritz Mühlenhoff at 2023-08-01T13:36:58+02:00 new chromium issues - - - - - 2 changed files: - data/CVE/list - data/DSA/list Changes: =

[Git][security-tracker-team/security-tracker][master] Track fixes for llvm-toolchain-14 issues via unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ad86d0b4 by Salvatore Bonaccorso at 2023-08-01T13:32:39+02:00 Track fixes for llvm-toolchain-14 issues via unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] "new" chromium issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 78c62be6 by Moritz Mühlenhoff at 2023-08-01T13:31:46+02:00 new chromium issue - - - - - 2 changed files: - data/CVE/list - data/DSA/list Changes: =

[Git][security-tracker-team/security-tracker][master] Track fixes for llvm-toolchain-13 via unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5a0f76e8 by Salvatore Bonaccorso at 2023-08-01T13:30:16+02:00 Track fixes for llvm-toolchain-13 via unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 8f88f0f1 by Moritz Mühlenhoff at 2023-08-01T12:49:22+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Triage CVE-2023-33466 in orthanc for buster LTS.

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: a44d2b61 by Chris Lamb at 2023-08-01T10:57:03+01:00 Triage CVE-2023-33466 in orthanc for buster LTS. - - - - - 2 changed files: - data/CVE/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add upstream tag reference for sogo upstream commit for CVE-2020-22402

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 67a2aa2e by Salvatore Bonaccorso at 2023-08-01T11:42:13+02:00 Add upstream tag reference for sogo upstream commit for CVE-2020-22402 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Sync status for CVE-2023-32731/grpc with findings from triage

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e78fce8b by Salvatore Bonaccorso at 2023-08-01T11:33:34+02:00 Sync status for CVE-2023-32731/grpc with findings from triage - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2023-34872/poppler

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 78394659 by Salvatore Bonaccorso at 2023-08-01T10:57:44+02:00 Add Debian bug reference for CVE-2023-34872/poppler - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Annotate fixing commit for CVE-2023-2731

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 218bf8c0 by Salvatore Bonaccorso at 2023-08-01T10:54:02+02:00 Annotate fixing commit for CVE-2023-2731 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Note that cjose maintainer is asked to prepare updates

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f5219428 by Salvatore Bonaccorso at 2023-08-01T10:43:07+02:00 Note that cjose maintainer is asked to prepare updates - - - - - 1 changed file: - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: cbe2253b by Salvatore Bonaccorso at 2023-08-01T10:22:45+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add tracking bug for CVE-2023-25525/nvidia-cuda-toolkit

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8ebb9e7e by Salvatore Bonaccorso at 2023-08-01T10:19:47+02:00 Add tracking bug for CVE-2023-25525/nvidia-cuda-toolkit - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 628927ab by security tracker role at 2023-08-01T08:12:22+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-34872/poppler

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6f9b5c91 by Salvatore Bonaccorso at 2023-08-01T09:39:18+02:00 Add CVE-2023-34872/poppler - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ef6bbecc by Salvatore Bonaccorso at 2023-08-01T09:38:30+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process some webmin issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c8282d4b by Salvatore Bonaccorso at 2023-08-01T09:36:00+02:00 Process some webmin issues - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process one NFU

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 85c852c1 by Salvatore Bonaccorso at 2023-08-01T09:34:51+02:00 Process one NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2023-28439/ckeditor via unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 68692521 by Salvatore Bonaccorso at 2023-08-01T09:26:36+02:00 Track fixed version for CVE-2023-28439/ckeditor via unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2023-38199/modsecurity-crs via unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d7add0e1 by Salvatore Bonaccorso at 2023-08-01T09:25:17+02:00 Track fixed version for CVE-2023-38199/modsecurity-crs via unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2023-38285/modsecurity via unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d60561a7 by Salvatore Bonaccorso at 2023-08-01T09:23:08+02:00 Track fixed version for CVE-2023-38285/modsecurity via unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add reference for CVE-2023-37450

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5ef9bfcb by Salvatore Bonaccorso at 2023-08-01T09:21:03+02:00 Add reference for CVE-2023-37450 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Mark CVE-2023-3817 as no-dsa

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1e1602ae by Salvatore Bonaccorso at 2023-08-01T09:16:15+02:00 Mark CVE-2023-3817 as no-dsa - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-3817/openssl

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 67ae5215 by Salvatore Bonaccorso at 2023-08-01T09:15:15+02:00 Add CVE-2023-3817/openssl - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process one NFU

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4197bdb9 by Salvatore Bonaccorso at 2023-08-01T09:10:57+02:00 Process one NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-4010/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ef34d2dd by Salvatore Bonaccorso at 2023-08-01T09:06:46+02:00 Add CVE-2023-4010/linux - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d8aa21de by Salvatore Bonaccorso at 2023-08-01T09:01:13+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list