[Git][security-tracker-team/security-tracker][master] Track fixed version for firefox-esr for mfsa2023-36 issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: fd6768dc by Salvatore Bonaccorso at 2023-08-30T06:44:27+02:00 Track fixed version for firefox-esr for mfsa2023-36 issues - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Track fixed version for firefox via unstable for mfsa2023-34 issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7eb3bc09 by Salvatore Bonaccorso at 2023-08-30T06:43:17+02:00 Track fixed version for firefox via unstable for mfsa2023-34 issues - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for oggvideotools issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3249df18 by Salvatore Bonaccorso at 2023-08-30T06:38:26+02:00 Add Debian bug reference for oggvideotools issues - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Take file from dsa-needed list

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 86cd3dcb by Salvatore Bonaccorso at 2023-08-30T05:40:35+02:00 Take file from dsa-needed list - - - - - 1 changed file: - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Reserve DLA-3549-1 for ring

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: 4c016457 by Thorsten Alteholz at 2023-08-29T23:09:48+02:00 Reserve DLA-3549-1 for ring - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] bugnums

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: eb7ca0fb by Moritz Muehlenhoff at 2023-08-29T23:02:42+02:00 bugnums - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Reserve DLA-3548-1 for qpdf

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: 5ffdf337 by Thorsten Alteholz at 2023-08-29T23:00:36+02:00 Reserve DLA-3548-1 for qpdf - - - - - 3 changed files: - data/CVE/list - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Track proposed update for clamav via bookworm-pu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0abe983e by Salvatore Bonaccorso at 2023-08-29T22:43:16+02:00 Track proposed update for clamav via bookworm-pu - - - - - 1 changed file: - data/next-point-update.txt Changes:

[Git][security-tracker-team/security-tracker][master] Track proposed update for clamav via bullseye-pu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e302e666 by Salvatore Bonaccorso at 2023-08-29T22:42:14+02:00 Track proposed update for clamav via bullseye-pu - - - - - 1 changed file: - data/next-oldstable-point-update.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add two zbar issues, with unclear upstream status

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c63ab282 by Salvatore Bonaccorso at 2023-08-29T22:24:22+02:00 Add two zbar issues, with unclear upstream status The reporter uses an older version, but unlcear if it is fixed or even reported

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 65698136 by Salvatore Bonaccorso at 2023-08-29T22:23:22+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2020-24165/qemu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5b8ef00d by Salvatore Bonaccorso at 2023-08-29T22:16:03+02:00 Add CVE-2020-24165/qemu - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 20a17e2e by security tracker role at 2023-08-29T20:12:45+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Update information on CVE-2023-4082{6,7,8}/libpf4j-java

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5c5694f3 by Salvatore Bonaccorso at 2023-08-29T22:03:15+02:00 Update information on CVE-2023-4082{6,7,8}/libpf4j-java All three issues, following the upstream reference boil down to the

[Git][security-tracker-team/security-tracker][master] Process one NFU

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9d210c9c by Salvatore Bonaccorso at 2023-08-29T21:58:10+02:00 Process one NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-31102 and CVE-2023-40481

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: fb8c8f90 by Salvatore Bonaccorso at 2023-08-29T18:52:38+02:00 Add CVE-2023-31102 and CVE-2023-40481 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] 2 commits: LTS: take orthanc and tiff

-desk) @@ -233,7 +233,7 @@ suricata (Adrian Bunk) thunderbird (Emilio) NOTE: 20230829: Added by pochu -- -tiff +tiff (gladk) NOTE: 20230826: Added by Front-Desk (utkarsh) -- trafficserver = org/lts-frontdesk.2023.txt

[Git][security-tracker-team/security-tracker][master] Add buster tryton-server 5.0.4-2+deb10u2 entry in data/CVE/list

Santiago R.R. pushed to branch master at Debian Security Tracker / security-tracker Commits: fdb067e1 by Santiago Ruano Rincón at 2023-08-29T13:19:11-03:00 Add buster tryton-server 5.0.4-2+deb10u2 entry in data/CVE/list - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Reserve DLA-3547-1 for tryton-server

(santiago) - NOTE: 20230826: Added by Front-Desk (utkarsh) - NOTE: 20230826: sync with the DSA released. (utkarsh) - NOTE: 20230829: Maintainer has prepared the update. I'll do the paperwork (santiago) --- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-41358/frr

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c43fe3dd by Salvatore Bonaccorso at 2023-08-29T18:00:34+02:00 Add CVE-2023-41358/frr - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-41359/frr

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 65d6a5da by Salvatore Bonaccorso at 2023-08-29T17:57:32+02:00 Add CVE-2023-41359/frr - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Document expected behaviour for check_by_ssh in monitoring-plugins

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4f786c32 by Salvatore Bonaccorso at 2023-08-29T17:49:20+02:00 Document expected behaviour for check_by_ssh in monitoring-plugins - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] yara non issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: feef0239 by Moritz Muehlenhoff at 2023-08-29T17:18:50+02:00 yara non issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] new firefox issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: d2277139 by Moritz Muehlenhoff at 2023-08-29T16:59:51+02:00 new firefox issues - - - - - 2 changed files: - data/CVE/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] new libpf4j-java issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 0d616398 by Moritz Muehlenhoff at 2023-08-29T15:18:01+02:00 new libpf4j-java issues - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 539aaf27 by Moritz Muehlenhoff at 2023-08-29T15:13:57+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Take tryton-server

) NOTE: 20230826: sync with the DSA released. (utkarsh) + NOTE: 20230829: Maintainer has prepared the update. I'll do the paperwork (santiago) -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d19b16cf40631778aa1577e0fb4417ddaf3b940 -- View

[Git][security-tracker-team/security-tracker][master] bookworm/bullseye triage

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 12ab88d6 by Moritz Muehlenhoff at 2023-08-29T12:53:13+02:00 bookworm/bullseye triage - - - - - 2 changed files: - data/CVE/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] lts: take openjdk-11

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 0ad9731c by Emilio Pozuelo Monfort at 2023-08-29T12:52:35+02:00 lts: take openjdk-11 - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] lts: take firefox-esr and thunderbird

-esr (Emilio) + NOTE: 20230829: Added by pochu +-- firmware-nonfree NOTE: 20230820: Added by Front-Desk (ta) -- @@ -227,6 +230,9 @@ suricata (Adrian Bunk) NOTE: 20230714: Still reviewing+testing CVEs. (bunk) NOTE: 20230731: Still reviewing+testing CVEs. (bunk) -- +thunderbird (Emilio

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-41360/frr

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ae0b868b by Salvatore Bonaccorso at 2023-08-29T11:19:44+02:00 Add CVE-2023-41360/frr - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-41361/frr

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0b0fcd6c by Salvatore Bonaccorso at 2023-08-29T11:06:56+02:00 Add CVE-2023-41361/frr - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] indent spu

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 1adb4c6b by Moritz Mühlenhoff at 2023-08-29T10:36:02+02:00 indent spu - - - - - 1 changed file: - data/next-point-update.txt Changes: =

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4711f028 by security tracker role at 2023-08-29T08:14:06+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2020-21469

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 06c9072b by Salvatore Bonaccorso at 2023-08-29T09:56:05+02:00 Add CVE-2020-21469 - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Mark two hdf5 issues as unimportant

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4bb3099c by Salvatore Bonaccorso at 2023-08-29T09:20:12+02:00 Mark two hdf5 issues as unimportant - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-4569/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: bdc27e8b by Salvatore Bonaccorso at 2023-08-29T08:47:44+02:00 Add CVE-2023-4569/linux - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-4563/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 67451971 by Salvatore Bonaccorso at 2023-08-29T08:38:20+02:00 Add CVE-2023-4563/linux - - - - - 1 changed file: - data/CVE/list Changes: =