[Git][security-tracker-team/security-tracker][master] Track proposed fixes for xterm via {buster,bullseye}-pu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0f8cc39c by Salvatore Bonaccorso at 2022-02-10T07:18:17+01:00 Track proposed fixes for xterm via {buster,bullseye}-pu - - - - - 2 changed files: - data/next-oldstable-point-update.txt -

[Git][security-tracker-team/security-tracker][master] CVE-2018-16301: Reference commit for 4.9 branch

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ac92c8a7 by Salvatore Bonaccorso at 2022-02-10T06:17:40+01:00 CVE-2018-16301: Reference commit for 4.9 branch - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] 2 commits: add twisted

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: c95d2bc4 by Thorsten Alteholz at 2022-02-09T23:26:12+01:00 add twisted - - - - - a250d301 by Thorsten Alteholz at 2022-02-09T23:38:52+01:00 mark CVE-2022-23853 as no-dsa for Stretch - - - - -

[Git][security-tracker-team/security-tracker][master] Add four more MariaDB CVEs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d0cbeef3 by Salvatore Bonaccorso at 2022-02-09T21:58:29+01:00 Add four more MariaDB CVEs - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-453{29,30,31}/gitea

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 164f5c9d by Salvatore Bonaccorso at 2022-02-09T21:47:39+01:00 Add CVE-2021-453{29,30,31}/gitea - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 73a62cd5 by Salvatore Bonaccorso at 2022-02-09T21:46:46+01:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add four new radare2 issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: bb5690db by Salvatore Bonaccorso at 2022-02-09T21:40:27+01:00 Add four new radare2 issues - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-0525/mruby

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a8f32bea by Salvatore Bonaccorso at 2022-02-09T21:38:48+01:00 Add CVE-2022-0525/mruby - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Demote severity of CVE-2018-16301 to unimportant

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6cae5458 by Salvatore Bonaccorso at 2022-02-09T21:20:51+01:00 Demote severity of CVE-2018-16301 to unimportant - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 45b7715e by security tracker role at 2022-02-09T20:10:20+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2018-16301/tcpdump

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: db95568b by Salvatore Bonaccorso at 2022-02-09T20:53:45+01:00 Add CVE-2018-16301/tcpdump The CVE got restored, see details in https://github.com/the-tcpdump-group/libpcap/issues/855, while

[Git][security-tracker-team/security-tracker][master] Reserve DLA-2916-1 for firefox-esr

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 1465af41 by Emilio Pozuelo Monfort at 2022-02-09T20:25:42+01:00 Reserve DLA-2916-1 for firefox-esr - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] webkit2gtk / wpewebkit upstream advisory WSA-2022-0002

Alberto Garcia pushed to branch master at Debian Security Tracker / security-tracker Commits: 7e590286 by Alberto Garcia at 2022-02-09T19:56:49+01:00 webkit2gtk / wpewebkit upstream advisory WSA-2022-0002 - - - - - 2 changed files: - data/CVE/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] firefox-esr DSA

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 04b6b320 by Moritz Mühlenhoff at 2022-02-09T19:21:16+01:00 firefox-esr DSA - - - - - 1 changed file: - data/DSA/list Changes: = data/DSA/list

[Git][security-tracker-team/security-tracker][master] Triage CVE-2022-0240 & CVE-2022-0481 in mruby for stretch LTS.

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: a9f01e66 by Chris Lamb at 2022-02-09T09:02:46-08:00 Triage CVE-2022-0240 CVE-2022-0481 in mruby for stretch LTS. - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Track embedded copy of unocode-data in boost1.74

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1cba07fe by Salvatore Bonaccorso at 2022-02-09T17:23:07+01:00 Track embedded copy of unocode-data in boost1.74 - - - - - 1 changed file: - data/embedded-code-copies Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-23853/{kate,ktexteditor}

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f9d61bd0 by Salvatore Bonaccorso at 2022-02-09T16:57:45+01:00 Add CVE-2022-23853/{kate,ktexteditor} - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update for two intel-microcode entries

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: bfee8802 by Salvatore Bonaccorso at 2022-02-09T16:39:45+01:00 Update for two intel-microcode entries - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] CVE-2017-0371: add one reference which explicitly refers to the CVE

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 19089e50 by Salvatore Bonaccorso at 2022-02-09T14:22:14+01:00 CVE-2017-0371: add one reference which explicitly refers to the CVE - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 4e1e2ac8 by Moritz Muehlenhoff at 2022-02-09T13:29:41+01:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] buster/bullseye triage

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 48e50b1a by Moritz Muehlenhoff at 2022-02-09T11:58:58+01:00 buster/bullseye triage - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] 2 commits: Update notes for nvidia-graphics-drivers in dla-needed.txt

but also in packages-to-support (Beuc) + NOTE: 20220209: monitor nvidia-graphics-drivers-legacy-390xx for a potential + NOTE: 20220209: backport (apo) -- openjdk-8 (Emilio) NOTE: 20220207: update ready, waiting for feedback, will upload tomorrow (pochu) @@ -86,7 +88,7 @@ ujson (Anton) NOTE

[Git][security-tracker-team/security-tracker][master] gen-DSA: don't set extracvefile to "null"

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 03990842 by Emilio Pozuelo Monfort at 2022-02-09T10:42:55+01:00 gen-DSA: dont set extracvefile to null ...if the file config key doesnt exist, otherwise git commit will fail. - - - - - 1

[Git][security-tracker-team/security-tracker][master] Reserve DLA-2915-1 for connman

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 738a4d06 by Emilio Pozuelo Monfort at 2022-02-09T10:42:24+01:00 Reserve DLA-2915-1 for connman - - - - - 3 changed files: - data/CVE/list - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-05{29,30}/unzip

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b83ab066 by Salvatore Bonaccorso at 2022-02-09T09:21:59+01:00 Add CVE-2022-05{29,30}/unzip - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-0485/libnbd

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 494f9fb2 by Salvatore Bonaccorso at 2022-02-09T09:20:28+01:00 Add CVE-2022-0485/libnbd - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Update information on CVE-2022-0480/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f3c73f48 by Salvatore Bonaccorso at 2022-02-09T09:17:31+01:00 Update information on CVE-2022-0480/linux - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-0480/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 14c09bde by Salvatore Bonaccorso at 2022-02-09T09:13:33+01:00 Add CVE-2022-0480/linux - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9a4f8ff8 by security tracker role at 2022-02-09T08:10:18+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list