[Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2023-34255 (confirmed MITRE rejection)

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6baf0022 by Salvatore Bonaccorso at 2023-06-05T07:44:37+02:00 Remove notes from CVE-2023-34255 (confirmed MITRE rejection) - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] CVE assigned for dokuwiki issue

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c5add16f by Salvatore Bonaccorso at 2023-06-05T07:42:35+02:00 CVE assigned for dokuwiki issue - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6d256505 by Salvatore Bonaccorso at 2023-06-05T07:38:40+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-3095/teampass

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4ca8f19f by Salvatore Bonaccorso at 2023-06-05T07:37:51+02:00 Add CVE-2023-3095/teampass - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] update notes

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: 1d61c835 by Thorsten Alteholz at 2023-06-05T00:21:38+02:00 update notes - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8da9a71a by security tracker role at 2023-06-04T20:12:33+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Reserve DLA-3445-1 for cpio

: 20230604: Already being fixed in ELTS. (bunk) --- docker-registry NOTE: 20230525: Added by Front-Desk -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ab70c16672ddb5d3682e325867b1106469b19521 -- View it on GitLab: https://salsa.debian.org

[Git][security-tracker-team/security-tracker][master] vim CVE-2023-1127: Set buster and bullseye as not-affected

Samuel Henrique pushed to branch master at Debian Security Tracker / security-tracker Commits: e8c5300d by Samuel Henrique at 2023-06-04T21:05:05+01:00 vim CVE-2023-1127: Set buster and bullseye as not-affected - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add 'Introduced by' for vim CVE-2023-1127

Samuel Henrique pushed to branch master at Debian Security Tracker / security-tracker Commits: 84a92bf6 by Samuel Henrique at 2023-06-04T20:49:32+01:00 Add Introduced by for vim CVE-2023-1127 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2023-26130/cpp-httplib

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b1672c5c by Salvatore Bonaccorso at 2023-06-04T21:20:59+02:00 Add Debian bug reference for CVE-2023-26130/cpp-httplib - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2023-30571/libarchive

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 51495464 by Salvatore Bonaccorso at 2023-06-04T15:10:07+02:00 Add Debian bug reference for CVE-2023-30571/libarchive - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Mark CVE-2023-3355{1,2}/erofs-utils as no-dsa for bookworm

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0f83b133 by Salvatore Bonaccorso at 2023-06-04T15:08:44+02:00 Mark CVE-2023-3355{1,2}/erofs-utils as no-dsa for bookworm - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2023-3355{1,2}/erofs-utils

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e8f0064e by Salvatore Bonaccorso at 2023-06-04T15:07:46+02:00 Add Debian bug reference for CVE-2023-3355{1,2}/erofs-utils - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add debian bug reference for CVE-2021-3610/imagemagick

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e88eac38 by Salvatore Bonaccorso at 2023-06-04T15:02:46+02:00 Add debian bug reference for CVE-2021-3610/imagemagick - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update status for CVE-2023-3355{1,2}/erofs-utils

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 65d01631 by Salvatore Bonaccorso at 2023-06-04T14:59:03+02:00 Update status for CVE-2023-3355{1,2}/erofs-utils - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update status for CVE-2021-3610/imagemagick

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9f79d402 by Salvatore Bonaccorso at 2023-06-04T14:50:44+02:00 Update status for CVE-2021-3610/imagemagick - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Correct source package name for janino

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 460c3506 by Salvatore Bonaccorso at 2023-06-04T14:38:08+02:00 Correct source package name for janino Fixes: f40ab82ace96 (Add CVE-2023-33546/janiino) - - - - - 1 changed file: -

[Git][security-tracker-team/security-tracker][master] Add note for nbconvert in dsa-needed list

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4b8abaa1 by Salvatore Bonaccorso at 2023-06-04T14:28:57+02:00 Add note for nbconvert in dsa-needed list - - - - - 1 changed file: - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] dla: add+take cpio (already being fixed in ELTS)

: = data/dla-needed.txt = @@ -30,6 +30,9 @@ cinder NOTE: 20230525: Added by Front-Desk NOTE: 20230525: NB. CVE-2023-2088 filed against python-glance-store, python-os-brick, nova and cinder. -- +cpio (Adrian Bunk) + NOTE: 20230604: Already being fixed

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 81c95782 by security tracker role at 2023-06-04T08:12:30+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Track proposed update for mariadb-10.5 via bullseye-pu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 47819ad6 by Salvatore Bonaccorso at 2023-06-04T08:39:01+02:00 Track proposed update for mariadb-10.5 via bullseye-pu - - - - - 1 changed file: - data/next-point-update.txt Changes:

[Git][security-tracker-team/security-tracker][master] Partially revert changes done for CVE-2022-47015

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7fb81835 by Salvatore Bonaccorso at 2023-06-04T08:34:33+02:00 Partially revert changes done for CVE-2022-47015 Additionally drop the explicit added bookworm entry added. Instread the postponed

[Git][security-tracker-team/security-tracker][master] data/packages/lts-do-call-me: Message ottoke@ before working on a fix

Otto Kekäläinen pushed to branch master at Debian Security Tracker / security-tracker Commits: cab9a9a3 by Otto Kekäläinen at 2023-06-03T23:15:04-07:00 data/packages/lts-do-call-me: Message ottoke@ before working on a fix Also fix indentation in CVE list missed in previous commit. - - - - -