[Git][security-tracker-team/security-tracker][master] update notes

= @@ -49,6 +49,7 @@ gpac (Roberto C. Sánchez) NOTE: 20211228: Returning to active work on this now that llvm/rustc update is complete (roberto) -- libarchive (Thorsten Alteholz) + NOTE: 20220102: testing package -- libgit2 (Utkarsh) NOTE: 20211029: CVE

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-45943/gdal

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0b45bd90 by Salvatore Bonaccorso at 2022-01-02T22:37:41+01:00 Add CVE-2021-45943/gdal - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add initial tracking for CVE-2021-45931

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9f2fdffa by Salvatore Bonaccorso at 2022-01-02T22:30:27+01:00 Add initial tracking for CVE-2021-45931 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-45948/assimp

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 41e55805 by Salvatore Bonaccorso at 2022-01-02T22:07:36+01:00 Add CVE-2021-45948/assimp Note for reviewers: The CVE description and the oss-fuzz OSV-2021-775 reference seems wrong in tmarking

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-45950/libredwg

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c4443472 by Salvatore Bonaccorso at 2022-01-02T21:59:17+01:00 Add CVE-2021-45950/libredwg - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-0080/mruby

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 37a5e91f by Salvatore Bonaccorso at 2022-01-02T21:52:26+01:00 Add CVE-2022-0080/mruby - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-22293/dolibarr

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 869669d1 by Salvatore Bonaccorso at 2022-01-02T21:37:08+01:00 Add CVE-2022-22293/dolibarr - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Track proposed update for bullseye-pu for php-laravel-framework

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7e2f14e7 by Salvatore Bonaccorso at 2022-01-02T21:18:51+01:00 Track proposed update for bullseye-pu for php-laravel-framework - - - - - 1 changed file: - data/next-point-update.txt

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f87924b2 by security tracker role at 2022-01-02T20:10:27+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] thunderbird DSA

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 60d46a28 by Moritz Mühlenhoff at 2022-01-02T17:52:13+01:00 thunderbird DSA - - - - - 2 changed files: - data/DSA/list - data/dsa-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2021-43617

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 06342afe by Salvatore Bonaccorso at 2022-01-02T16:07:45+01:00 Add Debian bug reference for CVE-2021-43617 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] 2 commits: Unify NFU naming for CVE-2021-43996 and CVE-2020-13909

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a9842f3a by Salvatore Bonaccorso at 2022-01-02T15:46:30+01:00 Unify NFU naming for CVE-2021-43996 and CVE-2020-13909 - - - - - 6c233686 by Salvatore Bonaccorso at 2022-01-02T15:48:19+01:00

[Git][security-tracker-team/security-tracker][master] Mark CVE-2021-43617 as no-dsa

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4859af14 by Salvatore Bonaccorso at 2022-01-02T15:44:04+01:00 Mark CVE-2021-43617 as no-dsa - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for ruby3.0 issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7328bc5c by Salvatore Bonaccorso at 2022-01-02T15:19:41+01:00 Add Debian bug reference for ruby3.0 issues - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2021-45960/expat

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ad96e728 by Salvatore Bonaccorso at 2022-01-02T15:17:55+01:00 Add Debian bug reference for CVE-2021-45960/expat - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update notes for CVE-2021-45959/fmtlib

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a1b4bd0b by Salvatore Bonaccorso at 2022-01-02T15:03:27+01:00 Update notes for CVE-2021-45959/fmtlib Pending REJECT from MITRE to clean up the CVE entry. - - - - - 1 changed file: -

[Git][security-tracker-team/security-tracker][master] Track proposed rabbitmq-server update via bullseye-pu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: be76208d by Salvatore Bonaccorso at 2022-01-02T14:29:43+01:00 Track proposed rabbitmq-server update via bullseye-pu Note, the update does not seem complete, so followed up on the release.d.o

[Git][security-tracker-team/security-tracker][master] Drop rabbitmq-server from dsa-needed list

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9a53fd0c by Salvatore Bonaccorso at 2022-01-02T14:28:31+01:00 Drop rabbitmq-server from dsa-needed list - - - - - 1 changed file: - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Update information for CVE-2021-22116/rabbitmq-server

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 51a0ee26 by Salvatore Bonaccorso at 2022-01-02T14:27:30+01:00 Update information for CVE-2021-22116/rabbitmq-server - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update information for CVE-2021-3271{8,9}/rabbitmq-server

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3e741c2e by Salvatore Bonaccorso at 2022-01-02T14:19:05+01:00 Update information for CVE-2021-3271{8,9}/rabbitmq-server - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2021-45930

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b56aaf5d by Salvatore Bonaccorso at 2022-01-02T14:10:59+01:00 Add Debian bug reference for CVE-2021-45930 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] CVE-2021-45930: Add reference to QT bug (not public)

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: eda465a7 by Salvatore Bonaccorso at 2022-01-02T14:05:24+01:00 CVE-2021-45930: Add reference to QT bug (not public) - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-45972/giftrans

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: da8b6fde by Salvatore Bonaccorso at 2022-01-02T09:21:09+01:00 Add CVE-2021-45972/giftrans - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d91b87ec by security tracker role at 2022-01-02T08:10:10+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list