[Git][security-tracker-team/security-tracker][master] Reserve DLA-3623-1 for linux-5.10

Ben Hutchings pushed to branch master at Debian Security Tracker / security-tracker Commits: a1c0315b by Ben Hutchings at 2023-10-19T02:24:37+02:00 Reserve DLA-3623-1 for linux-5.10 - - - - - 1 changed file: - data/DLA/list Changes: = data/DLA/list

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: dd2abda2 by Moritz Mühlenhoff at 2023-10-18T23:35:04+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] new virtualbox issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 5491f16c by Moritz Mühlenhoff at 2023-10-18T22:53:01+02:00 new virtualbox issues - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] new Java issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 1f6dca48 by Moritz Mühlenhoff at 2023-10-18T22:51:21+02:00 new Java issues - - - - - 2 changed files: - data/CVE/list - data/dsa-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] node-graphql fixed in sid

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 43086d1b by Moritz Mühlenhoff at 2023-10-18T22:44:15+02:00 node-graphql fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8d4661bc by Salvatore Bonaccorso at 2023-10-18T22:26:40+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-46009/gifsicle

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 54600bc1 by Salvatore Bonaccorso at 2023-10-18T22:24:19+02:00 Add CVE-2023-46009/gifsicle - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-5631/roundcube

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: aad4454b by Salvatore Bonaccorso at 2023-10-18T22:23:06+02:00 Add CVE-2023-5631/roundcube - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-5632/mosquitto

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c7093071 by Salvatore Bonaccorso at 2023-10-18T22:22:32+02:00 Add CVE-2023-5632/mosquitto - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 83bc8eb1 by Salvatore Bonaccorso at 2023-10-18T22:21:34+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b42a762a by security tracker role at 2023-10-18T20:12:44+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2023-5557/tracker-miners

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 058e4031 by Salvatore Bonaccorso at 2023-10-18T22:08:59+02:00 Track fixed version for CVE-2023-5557/tracker-miners - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add upstream tag information for CVE-2023-45143

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1caf4e69 by Salvatore Bonaccorso at 2023-10-18T17:55:58+02:00 Add upstream tag information for CVE-2023-45143 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add clarifying note about server stack removal from tomcat/9.0.70-2

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6ed540d4 by Salvatore Bonaccorso at 2023-10-18T17:51:39+02:00 Add clarifying note about server stack removal from tomcat/9.0.70-2 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add upstream tag for CVE-2023-5535 commit

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 79e5c0dc by Salvatore Bonaccorso at 2023-10-18T17:50:04+02:00 Add upstream tag for CVE-2023-5535 commit - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Track upstream tag for CVE-2023-44981 commit

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 11883df6 by Salvatore Bonaccorso at 2023-10-18T17:47:58+02:00 Track upstream tag for CVE-2023-44981 commit - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Adapt fixed version for CVE-2023-4421/nss

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 02e4ee4f by Salvatore Bonaccorso at 2023-10-18T17:39:28+02:00 Adapt fixed version for CVE-2023-4421/nss As it was fixed in 3.61 upstream and so included in 2:3.61-1 upload to unstable. - - -

[Git][security-tracker-team/security-tracker][master] Expand commit ids for CVE-2023-3854{5,6}

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 59e1bcc7 by Salvatore Bonaccorso at 2023-10-18T17:31:31+02:00 Expand commit ids for CVE-2023-3854{5,6} - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update status for CVE-2023-42670/samba

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: aa755c9b by Salvatore Bonaccorso at 2023-10-18T17:24:04+02:00 Update status for CVE-2023-42670/samba - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-5568

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5437c654 by Salvatore Bonaccorso at 2023-10-18T17:08:25+02:00 Add CVE-2023-5568 - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add upstream tag references for CVE-2023-5341/imagemagick

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a5c5912a by Salvatore Bonaccorso at 2023-10-18T16:56:09+02:00 Add upstream tag references for CVE-2023-5341/imagemagick - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2023-44487/nghttp2

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3d67fb12 by Salvatore Bonaccorso at 2023-10-18T16:51:11+02:00 Track fixed version for CVE-2023-44487/nghttp2 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update some references for CVE-2023-44487

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 49a2a50d by Salvatore Bonaccorso at 2023-10-18T16:50:42+02:00 Update some references for CVE-2023-44487 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for libowasp-antisamy-java issue

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4b12a16d by Salvatore Bonaccorso at 2023-10-18T15:34:12+02:00 Add Debian bug reference for libowasp-antisamy-java issue - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2023-42459/fastdds

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 70323b3d by Salvatore Bonaccorso at 2023-10-18T15:26:01+02:00 Add Debian bug reference for CVE-2023-42459/fastdds - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2023-44270/node-postcss via unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ad7a4bee by Salvatore Bonaccorso at 2023-10-18T15:06:57+02:00 Track fixed version for CVE-2023-44270/node-postcss via unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-42459/fastdds

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: bb0101ea by Salvatore Bonaccorso at 2023-10-18T15:05:53+02:00 Add CVE-2023-42459/fastdds - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add additional references for CVE-2023-43641

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: bef51e04 by Salvatore Bonaccorso at 2023-10-18T14:57:12+02:00 Add additional references for CVE-2023-43641 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-45853/zlib

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2515b313 by Salvatore Bonaccorso at 2023-10-18T14:47:56+02:00 Add CVE-2023-45853/zlib - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2023-43764 (duplicate of CVE-223-43762)

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c00552a5 by Salvatore Bonaccorso at 2023-10-18T14:31:33+02:00 Remove notes from CVE-2023-43764 (duplicate of CVE-223-43762) - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Remove notes from CVE wich was withdrawn by its CNA

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9ec4316d by Salvatore Bonaccorso at 2023-10-18T14:30:43+02:00 Remove notes from CVE wich was withdrawn by its CNA - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Remove notes from now rejected CVE-2023-4413

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1015d981 by Salvatore Bonaccorso at 2023-10-18T14:29:12+02:00 Remove notes from now rejected CVE-2023-4413 The assinment for rkhunter was bogus and finally rejected an CNA level. - - - - -

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-42319/golang-github-go-ethereum

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5313677d by Salvatore Bonaccorso at 2023-10-18T12:39:16+02:00 Add CVE-2023-42319/golang-github-go-ethereum - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process two NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d642379c by Salvatore Bonaccorso at 2023-10-18T12:38:46+02:00 Process two NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-39331/nodejs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 00d44f72 by Salvatore Bonaccorso at 2023-10-18T12:22:34+02:00 Add CVE-2023-39331/nodejs - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some more NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5dbb59b2 by Salvatore Bonaccorso at 2023-10-18T12:20:10+02:00 Process some more NFUs - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add two new gpac issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b4c53f65 by Salvatore Bonaccorso at 2023-10-18T12:09:42+02:00 Add two new gpac issues - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Update status for CVE-2023-45898/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4b3c0a41 by Salvatore Bonaccorso at 2023-10-18T11:49:40+02:00 Update status for CVE-2023-45898/linux - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update status for CVE-2023-45871/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9cbcd87c by Salvatore Bonaccorso at 2023-10-18T11:44:46+02:00 Update status for CVE-2023-45871/linux - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update status for CVE-2023-45863/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e135cdd4 by Salvatore Bonaccorso at 2023-10-18T11:34:09+02:00 Update status for CVE-2023-45863/linux - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0d1b00d6 by Salvatore Bonaccorso at 2023-10-18T11:28:15+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Update status for CVE-2023-45862/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c7e278cf by Salvatore Bonaccorso at 2023-10-18T11:25:59+02:00 Update status for CVE-2023-45862/linux - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update status for CVE-2023-40791/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6ecde475 by Salvatore Bonaccorso at 2023-10-18T11:18:41+02:00 Update status for CVE-2023-40791/linux - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Linux commit reference for XSA-441

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c798a56d by Salvatore Bonaccorso at 2023-10-18T11:11:44+02:00 Add Linux commit reference for XSA-441 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update status for CVE-2023-39189/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9461d1a9 by Salvatore Bonaccorso at 2023-10-18T11:08:05+02:00 Update status for CVE-2023-39189/linux - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8b902f92 by Salvatore Bonaccorso at 2023-10-18T10:48:30+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim phppgadmin.

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: 9e924bbb by Chris Lamb at 2023-10-18T09:45:57+01:00 data/dla-needed.txt: Claim phppgadmin. - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim python-django.

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: bb4e59d4 by Chris Lamb at 2023-10-18T09:43:48+01:00 data/dla-needed.txt: Claim python-django. - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f94d33e3 by security tracker role at 2023-10-18T08:12:02+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list