[Git][security-tracker-team/security-tracker][master] Reserve DLA-3615-1 for libcue

from bullseye 11.8 (1 CVE) (Beuc/front-desk) -- -libcue (Thorsten Alteholz) - NOTE: 20231011: Added by Front-Desk (ta) --- libreswan NOTE: 20230817: Added by Front-Desk (ta) NOTE: 20230909: Prepared a patch for CVE-2023-38712 and pushed it to View it on GitLab: https://salsa.debian.org

[Git][security-tracker-team/security-tracker][master] Triage tomcat9 issues in bookworm, trixie and sid

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 68b144c3 by Markus Koschany at 2023-10-12T00:00:06+02:00 Triage tomcat9 issues in bookworm, trixie and sid Marking them as fixed in 9.0.70-2 because the server stack has been removed - - - - - 1

[Git][security-tracker-team/security-tracker][master] 5 commits: add jetty9

: = data/dla-needed.txt = @@ -98,10 +98,16 @@ imagemagick NOTE: 20230622: Added by Front-Desk (Beuc) NOTE: 20230622: Requested by maintainer (rouca) to tidy remaining open CVEs (Beuc/front-desk) -- +jetty9 + NOTE: 20231011: Added by Front-Desk (ta

[Git][security-tracker-team/security-tracker][master] new vim issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: c4f17f75 by Moritz Muehlenhoff at 2023-10-11T23:17:08+02:00 new vim issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 25d42478 by Moritz Muehlenhoff at 2023-10-11T22:41:25+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f798f506 by security tracker role at 2023-10-11T20:12:13+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Reserve DLA-3614-1 for python3.7

Sean Whitton pushed to branch master at Debian Security Tracker / security-tracker Commits: d7fe0a3c by Sean Whitton at 2023-10-11T19:48:21+01:00 Reserve DLA-3614-1 for python3.7 - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] libcue, samba DSAs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 59915821 by Moritz Mühlenhoff at 2023-10-11T20:02:32+02:00 libcue, samba DSAs - - - - - 2 changed files: - data/DSA/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] additonal HTTP/2 references

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: a9cca200 by Moritz Muehlenhoff at 2023-10-11T17:43:38+02:00 additonal HTTP/2 references - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] mark netty as affeted for HTTP/2 issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 333cc196 by Moritz Muehlenhoff at 2023-10-11T17:41:12+02:00 mark netty as affeted for HTTP/2 issue - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] tomcat10 fixed in sid

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: da859a09 by Moritz Muehlenhoff at 2023-10-11T17:33:56+02:00 tomcat10 fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] bugnum

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 39613cc7 by Moritz Muehlenhoff at 2023-10-11T17:32:01+02:00 bugnum - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] nss fixed in sid

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 05d5ff82 by Moritz Muehlenhoff at 2023-10-11T16:53:17+02:00 nss fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] matrix-synapse fixed in sid

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: e8d03e59 by Moritz Muehlenhoff at 2023-10-11T16:44:35+02:00 matrix-synapse fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] new zookeeper issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: ed247221 by Moritz Muehlenhoff at 2023-10-11T14:31:28+02:00 new zookeeper issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Reserve DLA-3613-1 for curl

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 17dc31e4 by Emilio Pozuelo Monfort at 2023-10-11T13:43:30+02:00 Reserve DLA-3613-1 for curl - - - - - 3 changed files: - data/CVE/list - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] new jetty issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: d6e44583 by Moritz Muehlenhoff at 2023-10-11T13:02:06+02:00 new jetty issues - - - - - 2 changed files: - data/CVE/list - data/dsa-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 1369298a by Moritz Muehlenhoff at 2023-10-11T11:38:16+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim org-mode.

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: 22642b50 by Chris Lamb at 2023-10-11T10:17:04+01:00 data/dla-needed.txt: Claim org-mode. - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 8dfba272 by Moritz Muehlenhoff at 2023-10-11T10:39:17+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] adapt fixed versions for jpeg-xl

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: b5502c68 by Moritz Muehlenhoff at 2023-10-11T10:30:56+02:00 adapt fixed versions for jpeg-xl Previous experimental used a 0.9.x snapshot, but has since reverted to following the 0.8.x series. -

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8cedc7c1 by security tracker role at 2023-10-11T08:12:13+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] more curl references

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: c40bc6cb by Moritz Muehlenhoff at 2023-10-11T09:52:24+02:00 more curl references - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] separate CVE for HTTP2 issue for Golang

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 740dfd5a by Moritz Muehlenhoff at 2023-10-11T09:43:47+02:00 separate CVE for HTTP2 issue for Golang - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] new chromium issues (fixed in sid)

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: a714f2b7 by Moritz Muehlenhoff at 2023-10-11T09:10:50+02:00 new chromium issues (fixed in sid) - - - - - 2 changed files: - data/CVE/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] curl fixed in sid, n/a for buster

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 288eedca by Moritz Muehlenhoff at 2023-10-11T09:06:20+02:00 curl fixed in sid, n/a for buster - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] nginx fixed in sid

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 5f775ad2 by Moritz Muehlenhoff at 2023-10-11T09:03:44+02:00 nginx fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] new nss issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 3e897814 by Moritz Muehlenhoff at 2023-10-11T09:01:30+02:00 new nss issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] new curl issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 51acb009 by Moritz Muehlenhoff at 2023-10-11T08:59:57+02:00 new curl issues - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

Processing f1bd93a3fa1510ba20b67b144b3a4bafdc141753 failed

The error message was: reference to unknown bug CVE-2023-38545 reference to unknown bug CVE-2023-38546 make: *** [Makefile:19: all] Error 1 ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net

[Git][security-tracker-team/security-tracker][master] curl DSA

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: f1bd93a3 by Moritz Mühlenhoff at 2023-10-11T08:48:31+02:00 curl DSA - - - - - 2 changed files: - data/DSA/list - data/dsa-needed.txt Changes: =