[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2023-43642/snappy-java

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b5402254 by Salvatore Bonaccorso at 2023-10-05T07:53:24+02:00 Track fixed version for CVE-2023-43642/snappy-java - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add reference to CVE-2023-37543/cacti

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3242f79c by Salvatore Bonaccorso at 2023-10-05T06:42:48+02:00 Add reference to CVE-2023-37543/cacti - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-5371/wireshark

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0ccc5519 by Salvatore Bonaccorso at 2023-10-04T22:27:38+02:00 Add CVE-2023-5371/wireshark - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-5377/gpac

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0c8a7712 by Salvatore Bonaccorso at 2023-10-04T22:26:34+02:00 Add CVE-2023-5377/gpac - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1112b33e by Salvatore Bonaccorso at 2023-10-04T22:26:01+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ec6609da by Salvatore Bonaccorso at 2023-10-04T22:20:40+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e7e78554 by security tracker role at 2023-10-04T20:12:30+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2023-43642

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 492601b4 by Salvatore Bonaccorso at 2023-10-04T21:54:48+02:00 Add Debian bug reference for CVE-2023-43642 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for galera-3 issue

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 12c6657f by Salvatore Bonaccorso at 2023-10-04T21:52:48+02:00 Add Debian bug reference for galera-3 issue - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2023-43665/python-django

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 22c655b1 by Salvatore Bonaccorso at 2023-10-04T21:49:06+02:00 Add Debian bug reference for CVE-2023-43665/python-django - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add commit reference for CVE-2023-4806

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 010b5995 by Salvatore Bonaccorso at 2023-10-04T21:27:59+02:00 Add commit reference for CVE-2023-4806 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] CVE-2023-469{2, 3}: Reference as well kernel-list post for easier patch reviews

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 623828ac by Salvatore Bonaccorso at 2023-10-04T21:15:40+02:00 CVE-2023-469{2,3}: Reference as well kernel-list post for easier patch reviews - - - - - 1 changed file: - data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-43665/python-django

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c3385314 by Salvatore Bonaccorso at 2023-10-04T21:13:58+02:00 Add CVE-2023-43665/python-django - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Adjust one upstream tag which landed in a later release apparently

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 79f21cde by Salvatore Bonaccorso at 2023-10-04T20:51:10+02:00 Adjust one upstream tag which landed in a later release apparently - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update information on CVE-2023-39355

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: eca3b3c0 by Salvatore Bonaccorso at 2023-10-04T20:45:56+02:00 Update information on CVE-2023-39355 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Adjust commit for CVE-2023-39352

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4fa4ee8c by Salvatore Bonaccorso at 2023-10-04T20:43:09+02:00 Adjust commit for CVE-2023-39352 The referenced commit was not part of the FreeRDP repository. - - - - - 1 changed file: -

[Git][security-tracker-team/security-tracker][master] Remove duplicate references for CVE-2023-43898

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c675d15a by Salvatore Bonaccorso at 2023-10-04T20:40:14+02:00 Remove duplicate references for CVE-2023-43898 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] openrefine spu

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: a8d57b3b by Moritz Mühlenhoff at 2023-10-04T20:36:13+02:00 openrefine spu - - - - - 1 changed file: - data/next-point-update.txt Changes: =

[Git][security-tracker-team/security-tracker][master] chromium DSA

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: fd06c10e by Moritz Mühlenhoff at 2023-10-04T20:28:26+02:00 chromium DSA - - - - - 2 changed files: - data/DSA/list - data/dsa-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] freerdp2: Add patches fixing CVEs (see complete commit message for details)

Tobias Frost pushed to branch master at Debian Security Tracker / security-tracker Commits: 677ea8f5 by Tobias Frost at 2023-10-04T19:35:11+02:00 freerdp2: Add patches fixing CVEs (see complete commit message for details) Asked Upstream to associate CVEs with commit ids (via IRC,

[Git][security-tracker-team/security-tracker][master] additional references for libstb issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 1c360453 by Moritz Muehlenhoff at 2023-10-04T17:47:37+02:00 additional references for libstb issue - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add additional references for CVE-2023-43898

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c3478cc1 by Salvatore Bonaccorso at 2023-10-04T17:32:15+02:00 Add additional references for CVE-2023-43898 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Re-associate for now CVE-2023-42118 with libspf2

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c7253179 by Salvatore Bonaccorso at 2023-10-04T17:08:25+02:00 Re-associate for now CVE-2023-42118 with libspf2 The details around the CVE are still not clear, but it is sufficiently

[Git][security-tracker-team/security-tracker][master] new gitlab issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: af7e49a2 by Moritz Muehlenhoff at 2023-10-04T17:01:02+02:00 new gitlab issues - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 6ba40ade by Moritz Muehlenhoff at 2023-10-04T16:55:51+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add galera-4 as well for CVE-2023-5157

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 53768994 by Salvatore Bonaccorso at 2023-10-04T16:52:48+02:00 Add galera-4 as well for CVE-2023-5157 Link:

[Git][security-tracker-team/security-tracker][master] gitlab n/a

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: a6aa9a7f by Moritz Muehlenhoff at 2023-10-04T16:48:17+02:00 gitlab n/a - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] new libstb issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 065a54b7 by Moritz Muehlenhoff at 2023-10-04T16:47:16+02:00 new libstb issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: fdc67062 by Moritz Muehlenhoff at 2023-10-04T16:25:53+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] lts: take libx11 and libxpm

: 20231004: Added by Front-Desk (Beuc) NOTE: 20231004: Upcoming DSA (Beuc) -- -libxpm +libxpm (Emilio) NOTE: 20231004: Added by Front-Desk (Beuc) NOTE: 20231004: Upcoming DSA (Beuc) NOTE: 20231004: Some of the fixes are hardening for libx11 CVEs (Beuc) View it on GitLab: https

[Git][security-tracker-team/security-tracker][master] dla: add libx11 and libxpm

-needed.txt = @@ -93,6 +93,15 @@ libreswan NOTE: 20230909: all due to code refactoring. I intend to package the version NOTE: 20230909: from Bullseye instead as soon as the maintainer uploads the fix. (apo) -- +libx11 + NOTE: 20231004: Added by Front-Desk

[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2023-44272: citadel -> webcit

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker Commits: 0e795c3c by Sylvain Beucler at 2023-10-04T14:45:36+02:00 CVE-2023-44272: citadel - webcit - - - - - f861659b by Sylvain Beucler at 2023-10-04T14:45:38+02:00 CVE-2023-44272/webcit: buster ignored -

[Git][security-tracker-team/security-tracker][master] libx11 fixed in sid

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: cd8370a3 by Moritz Muehlenhoff at 2023-10-04T14:23:47+02:00 libx11 fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] bullseye/bookworm triage

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: f35d7aa3 by Moritz Muehlenhoff at 2023-10-04T14:21:50+02:00 bullseye/bookworm triage - - - - - 2 changed files: - data/CVE/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] python-git spu

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 671e53f7 by Moritz Mühlenhoff at 2023-10-04T14:04:41+02:00 python-git spu - - - - - 1 changed file: - data/next-point-update.txt Changes: =

[Git][security-tracker-team/security-tracker][master] curl, glib2.0 ospu

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: f343708c by Moritz Mühlenhoff at 2023-10-04T14:03:12+02:00 curl, glib2.0 ospu - - - - - 1 changed file: - data/next-oldstable-point-update.txt Changes:

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f2cea996 by Salvatore Bonaccorso at 2023-10-04T10:25:22+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-44272/citadel

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a0ea84f4 by Salvatore Bonaccorso at 2023-10-04T10:24:51+02:00 Add CVE-2023-44272/citadel - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6b3626a6 by security tracker role at 2023-10-04T08:12:13+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 15711ec6 by Salvatore Bonaccorso at 2023-10-04T09:50:14+02:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Mark Red Hat OpenStack reference as non issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: ea049644 by Moritz Muehlenhoff at 2023-10-04T09:38:49+02:00 Mark Red Hat OpenStack reference as non issue - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] new galera issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: a8fe94d2 by Moritz Muehlenhoff at 2023-10-04T09:26:25+02:00 new galera issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-5366/openvswitch

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6036f166 by Salvatore Bonaccorso at 2023-10-04T09:16:11+02:00 Add CVE-2023-5366/openvswitch - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] lts: drop zabbix, no remaining issues

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 4aa3fb5f by Emilio Pozuelo Monfort at 2023-10-04T09:11:44+02:00 lts: drop zabbix, no remaining issues - - - - - 1 changed file: - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-4610/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d4985de8 by Salvatore Bonaccorso at 2023-10-04T08:54:39+02:00 Add CVE-2023-4610/linux - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-5346/chromium

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e11d03dc by Salvatore Bonaccorso at 2023-10-04T08:05:04+02:00 Add CVE-2023-5346/chromium - - - - - 1 changed file: - data/CVE/list Changes: =