[Git][security-tracker-team/security-tracker][master] Fix sid version for CVE-2018-25091/python-urllib3.

2023-10-15 Thread Guilhem Moulin (@guilhem)
Guilhem Moulin pushed to branch master at Debian Security Tracker / security-tracker Commits: 16b2d4ed by Guilhem Moulin at 2023-10-16T01:10:02+02:00 Fix sid version for CVE-2018-25091/python-urllib3. The first version ≥1.25.2 that landed in unstable is 1.25.6-4 no 1.25.6-1 (which was

[Git][security-tracker-team/security-tracker][master] DLA-3610-1: Also mark CVE-2018-25091/python-urllib3 as fixed.

2023-10-15 Thread Guilhem Moulin (@guilhem)
Guilhem Moulin pushed to branch master at Debian Security Tracker / security-tracker Commits: a6877d8d by Guilhem Moulin at 2023-10-16T00:04:34+02:00 DLA-3610-1: Also mark CVE-2018-25091/python-urllib3 as fixed. MITRE just assigned that ID for the non-titlecase variant of CVE-2018-20060. -

[Git][security-tracker-team/security-tracker][master] 5 commits: add nss

2023-10-15 Thread Thorsten Alteholz (@alteholz)
and cinder. (lamby) -- +nss + NOTE: 20231015: Added by Front-Desk (ta) +-- nvidia-cuda-toolkit NOTE: 20230514: Added by Front-Desk (utkarsh) NOTE: 20230514: package listed in packages-to-support; a bunch of CVEs have @@ -238,6 +244,9 @@ suricata (Adrian Bunk) trafficserver NOTE: 20231011: Added

[Git][security-tracker-team/security-tracker][master] Mark CVE-2020-18839/poppler in buster fixed by the same version as CVE-2020-27778

2023-10-15 Thread Adrian Bunk (@bunk)
Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker Commits: abcc50cf by Adrian Bunk at 2023-10-15T23:24:58+03:00 Mark CVE-2020-18839/poppler in buster fixed by the same version as CVE-2020-27778 Confirmed with the PoC that 0.71.0-5 segfaults and

[Git][security-tracker-team/security-tracker][master] automatic update

2023-10-15 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 26d5575d by security tracker role at 2023-10-15T20:12:17+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] CVE-2023-42118: Add libspf2 bugnum

2023-10-15 Thread Samuel Henrique (@samueloph)
Samuel Henrique pushed to branch master at Debian Security Tracker / security-tracker Commits: 8804bfde by Samuel Henrique at 2023-10-15T20:06:14+01:00 CVE-2023-42118: Add libspf2 bugnum - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim h2o

2023-10-15 Thread Abhijith PA (@abhijith)
Abhijith PA pushed to branch master at Debian Security Tracker / security-tracker Commits: 7370d5f0 by Abhijith PA at 2023-10-15T22:46:35+05:30 data/dla-needed.txt: Claim h2o - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] LTS: claim nghttp2 in dla-needed.txt

2023-10-15 Thread Sean Whitton (@spwhitton)
Sean Whitton pushed to branch master at Debian Security Tracker / security-tracker Commits: ff011228 by Sean Whitton at 2023-10-15T11:53:24+01:00 LTS: claim nghttp2 in dla-needed.txt - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] automatic update

2023-10-15 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 02ce1093 by security tracker role at 2023-10-15T08:12:05+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list