[Git][security-tracker-team/security-tracker][master] Add php to dsa-needed list

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c2165849 by Salvatore Bonaccorso at 2024-04-12T06:32:35+02:00 Add php to dsa-needed list - - - - - 1 changed file: - data/dsa-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Add todo items for php issues as the filling was just an initial tracking

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6b4b2e1b by Salvatore Bonaccorso at 2024-04-12T06:30:32+02:00 Add todo items for php issues as the filling was just an initial tracking - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add new set of PHP issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 68f2674b by Salvatore Bonaccorso at 2024-04-12T06:15:26+02:00 Add new set of PHP issues - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2024-27309/kafka

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9b6bee22 by Salvatore Bonaccorso at 2024-04-12T06:01:12+02:00 Add CVE-2024-27309/kafka - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add the wpewebkit versions that fix the CVEs from WSA-2024-0002

Alberto Garcia pushed to branch master at Debian Security Tracker / security-tracker Commits: c0e3e59c by Alberto Garcia at 2024-04-12T01:23:47+02:00 Add the wpewebkit versions that fix the CVEs from WSA-2024-0002 See also commit bcbc48122cd575b0d938c82183ab1e8b384bf5d1 - - - - - 1

[Git][security-tracker-team/security-tracker][master] Removing claim since I will likely not have the time to work on the package for a few days.

tream (bunk) NOTE: 20240410: See discussion at: https://lists.debian.org/debian-lts/2024/04/threads.html#00012 + NOTE: 20240411: Added some postpone tags for DoS class and removed some where + NOTE: 20240411: patch is available and has arbitrary code exec class. (ola) -- frr NOTE: 20231119:

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7905b86f by Salvatore Bonaccorso at 2024-04-11T22:52:19+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1f892d80 by Salvatore Bonaccorso at 2024-04-11T22:43:21+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] 2 commits: Changed wording since the term tool can be misunderstood.

Ola Lundqvist pushed to branch master at Debian Security Tracker / security-tracker Commits: 2f1d2047 by Ola Lundqvist at 2024-04-11T22:34:48+02:00 Changed wording since the term tool can be misunderstood. - - - - - 4a0e4e2a by Ola Lundqvist at 2024-04-11T22:34:50+02:00 Changed a some CVEs

[Git][security-tracker-team/security-tracker][master] Process one NFU

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d93f96a1 by Salvatore Bonaccorso at 2024-04-11T22:30:23+02:00 Process one NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Removed postpone tag for buster freeimage CVEs since patches are available in fedora.

Ola Lundqvist pushed to branch master at Debian Security Tracker / security-tracker Commits: 7d965e06 by Ola Lundqvist at 2024-04-11T22:26:16+02:00 Removed postpone tag for buster freeimage CVEs since patches are available in fedora. The postpone tag should probably be removed for later

[Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2024-2866

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f7e88bf4 by Salvatore Bonaccorso at 2024-04-11T22:22:57+02:00 Remove notes from CVE-2024-2866 Got rejected by the assigning CNA as it was an accidential reservation for same issue as covered

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 95461784 by security tracker role at 2024-04-11T20:20:12+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Removed postpone tag for buster freeimage CVE since patch is available in fedora.

Ola Lundqvist pushed to branch master at Debian Security Tracker / security-tracker Commits: 30068ece by Ola Lundqvist at 2024-04-11T22:11:20+02:00 Removed postpone tag for buster freeimage CVE since patch is available in fedora. The postpone tag should probably be removed for later

[Git][security-tracker-team/security-tracker][master] Add new gitlab issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7ab4d582 by Salvatore Bonaccorso at 2024-04-11T21:18:44+02:00 Add new gitlab issues - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] chromium DSA

Andres Salomon pushed to branch master at Debian Security Tracker / security-tracker Commits: d3100743 by Andres Salomon at 2024-04-11T14:00:56-04:00 chromium DSA - - - - - 2 changed files: - data/DSA/list - data/dsa-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] bugnums

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 518daeec by Moritz Muehlenhoff at 2024-04-11T17:49:05+02:00 bugnums - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 609f5e65 by Moritz Muehlenhoff at 2024-04-11T16:42:45+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] new fastdds issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: c21857ae by Moritz Muehlenhoff at 2024-04-11T14:21:24+02:00 new fastdds issues - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 2f8f5eb9 by Moritz Muehlenhoff at 2024-04-11T13:38:21+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Revert "Tinymce is not affected in buster, removing from dla-needed."

Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker Commits: ab1af125 by Adrian Bunk at 2024-04-11T13:52:29+03:00 Revert Tinymce is not affected in buster, removing from dla-needed. This reverts commit 21503da906963c312a371bf78d64f3c95b8ec67a. not-affected

[Git][security-tracker-team/security-tracker][master] Revert "Remove runc from dla-needed"

Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker Commits: abad8cee by Adrian Bunk at 2024-04-11T13:42:21+03:00 Revert Remove runc from dla-needed This reverts commit 6c41e578160845c9f84e1a335d5266011e542869.

[Git][security-tracker-team/security-tracker][master] add references for Linux and ATS

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: b8e1ec48 by Moritz Muehlenhoff at 2024-04-11T12:41:45+02:00 add references for Linux and ATS - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f3fad16b by Salvatore Bonaccorso at 2024-04-11T10:30:00+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2024-3652/libreswan

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5cfa909f by Salvatore Bonaccorso at 2024-04-11T10:29:06+02:00 Add CVE-2024-3652/libreswan Note that the only reference URL is for now not reachable, so its unclear which versions are affected

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6a813895 by security tracker role at 2024-04-11T08:12:13+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add some more libjfreechart-java CVEs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 326c3d64 by Salvatore Bonaccorso at 2024-04-11T08:35:04+02:00 Add some more libjfreechart-java CVEs - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7ee298b2 by Salvatore Bonaccorso at 2024-04-11T08:16:57+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list