[Git][security-tracker-team/security-tracker][master] Add CVE-2021-22570/protobuf

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5d51ad28 by Salvatore Bonaccorso at 2022-01-27T08:49:38+01:00 Add CVE-2021-22570/protobuf - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-21715/codeigniter

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d532bb31 by Salvatore Bonaccorso at 2022-01-27T08:07:38+01:00 Add CVE-2022-21715/codeigniter - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0cf973bb by Salvatore Bonaccorso at 2022-01-27T08:06:30+01:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Reference upstream commit for CVE-2022-22844/tiff

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e6448b91 by Salvatore Bonaccorso at 2022-01-27T06:39:27+01:00 Reference upstream commit for CVE-2022-22844/tiff - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Track fixed verison via unstable for CVE-2022-22844/tiff

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2732c9c9 by Salvatore Bonaccorso at 2022-01-27T06:38:31+01:00 Track fixed verison via unstable for CVE-2022-22844/tiff - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 57b860f5 by Salvatore Bonaccorso at 2022-01-26T22:36:28+01:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Unify naming of ShowDoc NFU

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 96dec461 by Salvatore Bonaccorso at 2022-01-26T22:25:22+01:00 Unify naming of ShowDoc NFU - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-0359/vim

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0b360e6c by Salvatore Bonaccorso at 2022-01-26T22:24:23+01:00 Add CVE-2022-0359/vim - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-0361/vim

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: cdca4db0 by Salvatore Bonaccorso at 2022-01-26T22:23:37+01:00 Add CVE-2022-0361/vim - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-0368/vim

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 941df1fc by Salvatore Bonaccorso at 2022-01-26T22:22:34+01:00 Add CVE-2022-0368/vim - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Proces some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b7e0f5ca by Salvatore Bonaccorso at 2022-01-26T22:21:50+01:00 Proces some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-23990/expat

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: baf88594 by Salvatore Bonaccorso at 2022-01-26T22:10:42+01:00 Add CVE-2022-23990/expat - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] CVE-2022-23132/zabbix: precision

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker Commits: 861b08fc by Sylvain Beucler at 2022-01-26T21:38:00+01:00 CVE-2022-23132/zabbix: precision - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] CVE-2022-23132/zabbix: stretch not-affected

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker Commits: 33e02ac7 by Sylvain Beucler at 2022-01-26T21:31:14+01:00 CVE-2022-23132/zabbix: stretch not-affected - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b9388d42 by Salvatore Bonaccorso at 2022-01-26T21:24:52+01:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-22600/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 88ab4883 by Salvatore Bonaccorso at 2022-01-26T21:18:53+01:00 Add CVE-2021-22600/linux - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 18b291a1 by security tracker role at 2022-01-26T20:10:21+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] List CVE-2021-46141 for DLA 2883-2

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 39e1d58a by Salvatore Bonaccorso at 2022-01-26T20:56:44+01:00 List CVE-2021-46141 for DLA 2883-2 Rationale: its not a functional regression here, but the respective security fix to address

[Git][security-tracker-team/security-tracker][master] Reserve DSA number for uriparser update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c68061cb by Salvatore Bonaccorso at 2022-01-26T20:46:19+01:00 Reserve DSA number for uriparser update - - - - - 2 changed files: - data/DSA/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Reserve DLA-2883-2 for uriparser

= data/dla-needed.txt = @@ -96,9 +96,6 @@ samba (Utkarsh Gupta) ujson (Anton) NOTE: 20220121: please reheck, at least the mentioned function is available in Stretch -- -uriparser (lamby) - NOTE: 20220126: Fix for CVE-2021

[Git][security-tracker-team/security-tracker][master] 2 commits: data/dla-needed.txt: Correct ordering

: but is unfixed in stretch, plus 2 additional CVEs (bunk) @@ -96,6 +96,9 @@ samba (Utkarsh Gupta) ujson (Anton) NOTE: 20220121: please reheck, at least the mentioned function is available in Stretch -- +uriparser (lamby) + NOTE: 20220126: Fix for CVE-2021-46141 in DLA 2883-1 was incomplete; missing a hunk

[Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2021-45079/strongswan

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: eb1bc0e9 by Salvatore Bonaccorso at 2022-01-26T17:22:45+01:00 Track fixed version via unstable for CVE-2021-45079/strongswan - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] node-cached-path-relative fixed in sid

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 34c6fe51 by Moritz Muehlenhoff at 2022-01-26T15:44:23+01:00 node-cached-path-relative fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker Commits: f9962365 by Neil Williams at 2022-01-26T11:03:31+00:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] buster/bullseye triage

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 3db1fe1a by Moritz Muehlenhoff at 2022-01-26T11:55:52+01:00 buster/bullseye triage remove node-matrix-js-sdk for CVE-2021-44538, seems unrelated - - - - - 2 changed files: - data/CVE/list -

[Git][security-tracker-team/security-tracker][master] CVE-2021-26247/cacti

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker Commits: bc569792 by Neil Williams at 2022-01-26T10:47:02+00:00 CVE-2021-26247/cacti Upstream included this fix in the same issue commit for CVE-2021-3816 - - - - - 1 changed file: - data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process 1 NFU

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker Commits: d969a8a1 by Neil Williams at 2022-01-26T10:28:14+00:00 Process 1 NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-0351/vim

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5081a144 by Salvatore Bonaccorso at 2022-01-26T10:03:51+01:00 Add CVE-2022-0351/vim - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-0338/loguru

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: bade5a4a by Salvatore Bonaccorso at 2022-01-26T09:58:05+01:00 Add CVE-2022-0338/loguru Im marking this as unimportant as the action taken by upstream seems to be to clarify the documentation

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-45343/librecad

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 980b24be by Salvatore Bonaccorso at 2022-01-26T09:55:38+01:00 Add CVE-2021-45343/librecad - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-45342/librecad

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 91cd0daa by Salvatore Bonaccorso at 2022-01-26T09:53:01+01:00 Add CVE-2021-45342/librecad - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2021-45340/libsixel

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5709070e by Salvatore Bonaccorso at 2022-01-26T09:50:49+01:00 Add Debian bug reference for CVE-2021-45340/libsixel - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-45341/librecad

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a0021a70 by Salvatore Bonaccorso at 2022-01-26T09:48:50+01:00 Add CVE-2021-45341/librecad - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-3850 for libphp-adodb

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker Commits: e26e15de by Neil Williams at 2022-01-26T08:47:34+00:00 Add CVE-2021-3850 for libphp-adodb - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-45340/libsixel

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 942733e5 by Salvatore Bonaccorso at 2022-01-26T09:42:40+01:00 Add CVE-2021-45340/libsixel - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some more new NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: eec0ff69 by Salvatore Bonaccorso at 2022-01-26T09:40:04+01:00 Process some more new NFUs - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-23959/varnish

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 24892cd2 by Salvatore Bonaccorso at 2022-01-26T09:34:53+01:00 Add CVE-2022-23959/varnish - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process NFU

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker Commits: 7e36b97a by Neil Williams at 2022-01-26T08:31:42+00:00 Process NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process one NFU

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3f1806c8 by Salvatore Bonaccorso at 2022-01-26T09:29:59+01:00 Process one NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process several new NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 07336b31 by Salvatore Bonaccorso at 2022-01-26T09:28:47+01:00 Process several new NFUs - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 548ab52f by security tracker role at 2022-01-26T08:10:15+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list