[Git][security-tracker-team/security-tracker][master] Add CVE-2023-7090/sudo

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f485e51e by Salvatore Bonaccorso at 2023-12-24T07:52:47+01:00 Add CVE-2023-7090/sudo - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] 2 commits: add sudo

: 20231221: Added by pochu -- @@ -213,6 +216,9 @@ squid (Markus Koschany) NOTE: 20231218: Investigating new CVE. (apo) NOTE: 20231223: The update requires a few more tests. Intend to release after the holidays. -- +sudo + NOTE: 20231224: Added by Front-Desk (ta) +-- suricata (Adrian Bunk) NOTE

[Git][security-tracker-team/security-tracker][master] 5 commits: mark CVE-2023-48795 as no-dsa for proftpd-dfsg in Buster

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: 9883cbe5 by Thorsten Alteholz at 2023-12-24T01:04:13+01:00 mark CVE-2023-48795 as no-dsa for proftpd-dfsg in Buster - - - - - dc1a125e by Thorsten Alteholz at 2023-12-24T01:04:15+01:00 mark

[Git][security-tracker-team/security-tracker][master] CVE-2021-20180

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker Commits: e4968a10 by Bastien Roucariès at 2023-12-23T23:41:35+00:00 CVE-2021-20180 Mark as not affected code is introduced later than buster - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-32725/zabbix

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c9c63c61 by Salvatore Bonaccorso at 2023-12-23T22:44:13+01:00 Add CVE-2023-32725/zabbix - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-32726/zabbix

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c4aa6add by Salvatore Bonaccorso at 2023-12-23T22:41:24+01:00 Add CVE-2023-32726/zabbix - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-32727/zabbix

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 32a543de by Salvatore Bonaccorso at 2023-12-23T22:36:40+01:00 Add CVE-2023-32727/zabbix - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-32728/zabbix

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ca1a0a3b by Salvatore Bonaccorso at 2023-12-23T22:29:39+01:00 Add CVE-2023-32728/zabbix - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] 3 commits: Remove bouncycastle from dla-needed.txt

) NOTE: 20231218: Investigating new CVE. (apo) + NOTE: 20231223: The update requires a few more tests. Intend to release after the holidays. -- suricata (Adrian Bunk) NOTE: 20230620: Added by Front-Desk (Beuc) View it on GitLab: https://salsa.debian.org/security-tracker-team/security

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 87fd5353 by Salvatore Bonaccorso at 2023-12-23T21:48:58+01:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Retake tomcat

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker Commits: 82bdf084 by Bastien Roucariès at 2023-12-23T20:33:08+00:00 Retake tomcat - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e1c971ee by security tracker role at 2023-12-23T20:12:22+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 31bfe152 by Salvatore Bonaccorso at 2023-12-23T21:06:14+01:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-51443/freeswitch

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f4f4306d by Salvatore Bonaccorso at 2023-12-23T20:56:56+01:00 Add CVE-2023-51443/freeswitch - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process NFU

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 791b7fc1 by Salvatore Bonaccorso at 2023-12-23T20:53:08+01:00 Process NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2023-48704

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: acdd6479 by Salvatore Bonaccorso at 2023-12-23T20:50:40+01:00 Add Debian bug reference for CVE-2023-48704 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] two nodejs issues n/a or ignored for bullseye

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: e70ad7ca by Moritz Muehlenhoff at 2023-12-23T20:26:07+01:00 two nodejs issues n/a or ignored for bullseye - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] curl DSA

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: cc038894 by Moritz Mühlenhoff at 2023-12-23T19:59:24+01:00 curl DSA - - - - - 3 changed files: - data/CVE/list - data/DSA/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Update information on CVE-2023-49356/mp3gain

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1983db92 by Salvatore Bonaccorso at 2023-12-23T16:20:48+01:00 Update information on CVE-2023-49356/mp3gain - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add exim4 for smtp smuggling attack issue

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: db603062 by Salvatore Bonaccorso at 2023-12-23T16:06:11+01:00 Add exim4 for smtp smuggling attack issue - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for wolfssl issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2adb3fb1 by Salvatore Bonaccorso at 2023-12-23T13:58:05+01:00 Add Debian bug reference for wolfssl issues - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Drop commited list.orig file

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 16520aa8 by Salvatore Bonaccorso at 2023-12-23T13:43:37+01:00 Drop commited list.orig file - - - - - 1 changed file: - − data/CVE/list.orig Changes: =

[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2023-39360/cacti: buster vulnerable

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker Commits: 1ff79ebb by Sylvain Beucler at 2023-12-23T11:41:03+01:00 CVE-2023-39360/cacti: buster vulnerable Partially reverts c2cd83ada63557101b824353810914de3f0106b0 - - - - - c9c83c7f by Sylvain Beucler at

[Git][security-tracker-team/security-tracker][master] CVE-2023-51448/cacti: reference introductory commit / previous CVE fix

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker Commits: 700ff44c by Sylvain Beucler at 2023-12-23T10:25:02+01:00 CVE-2023-51448/cacti: reference introductory commit / previous CVE fix - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4ab91365 by Salvatore Bonaccorso at 2023-12-23T10:00:17+01:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2023-50250/cacti: buster not-affected

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker Commits: d800e5e6 by Sylvain Beucler at 2023-12-23T09:48:25+01:00 CVE-2023-50250/cacti: buster not-affected - - - - - a65dc34d by Sylvain Beucler at 2023-12-23T09:49:01+01:00 CVE-2023-50569/cacti: most

[Git][security-tracker-team/security-tracker][master] CVE-2023-49088/cacti: clarify link

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker Commits: 78055871 by Sylvain Beucler at 2023-12-23T09:32:35+01:00 CVE-2023-49088/cacti: clarify link - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5909311f by security tracker role at 2023-12-23T08:11:38+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list