[Git][security-tracker-team/security-tracker][master] Reserve DLA-3795-1 for knot-resolver

2024-04-25 Thread Markus Koschany (@apo)
Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: d58a1355 by Markus Koschany at 2024-04-26T07:35:06+02:00 Reserve DLA-3795-1 for knot-resolver - - - - - 3 changed files: - data/CVE/list - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add reference for CVE-2024-0582/linux

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6713020f by Salvatore Bonaccorso at 2024-04-25T23:08:00+02:00 Add reference for CVE-2024-0582/linux - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Reference upstream commits for glibc issues

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 661e6c6d by Salvatore Bonaccorso at 2024-04-25T23:04:30+02:00 Reference upstream commits for glibc issues - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add new glibc issues

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e71c457c by Salvatore Bonaccorso at 2024-04-25T22:58:49+02:00 Add new glibc issues - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Update information for CVE-2024-25583/pdns-recursor

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 73a17223 by Salvatore Bonaccorso at 2024-04-25T22:50:18+02:00 Update information for CVE-2024-25583/pdns-recursor - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Remove no-dsa tagged entries which got an update in DLA-3794-1

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: dda6f1be by Salvatore Bonaccorso at 2024-04-25T22:38:37+02:00 Remove no-dsa tagged entries which got an update in DLA-3794-1 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Cleanup old trailing whitespace from DLA-179-1 entry

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2632979c by Salvatore Bonaccorso at 2024-04-25T22:40:50+02:00 Cleanup old trailing whitespace from DLA-179-1 entry - - - - - 1 changed file: - data/DLA/list Changes:

[Git][security-tracker-team/security-tracker][master] 2 commits: Process some NFUs

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9128e489 by Salvatore Bonaccorso at 2024-04-25T22:35:45+02:00 Process some NFUs - - - - - 69bca91c by Salvatore Bonaccorso at 2024-04-25T22:35:45+02:00 Add two glpi issues - - - - - 1

[Git][security-tracker-team/security-tracker][master] Remove additional trailing whitespace from entry

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ee9324f6 by Salvatore Bonaccorso at 2024-04-25T22:39:50+02:00 Remove additional trailing whitespace from entry - - - - - 1 changed file: - data/DLA/list Changes:

[Git][security-tracker-team/security-tracker][master] Process one NFU

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 98112a68 by Salvatore Bonaccorso at 2024-04-25T22:26:44+02:00 Process one NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] DLA-3794-1/putty

2024-04-25 Thread @rouca
Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker Commits: cfaffae9 by Bastien Roucariès at 2024-04-25T20:34:07+00:00 DLA-3794-1/putty - - - - - 1 changed file: - data/DLA/list Changes: = data/DLA/list

[Git][security-tracker-team/security-tracker][master] Remove notes from CVEs which were withdrawn by the assigning CNA

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3b2b94c4 by Salvatore Bonaccorso at 2024-04-25T22:22:37+02:00 Remove notes from CVEs which were withdrawn by the assigning CNA - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2024-3512 (duplicate of CVE-2024-2583)

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 211e7940 by Salvatore Bonaccorso at 2024-04-25T22:20:52+02:00 Remove notes from CVE-2024-3512 (duplicate of CVE-2024-2583) - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] automatic update

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 29679e3f by security tracker role at 2024-04-25T20:11:52+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2024-31745

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3c624a09 by Salvatore Bonaccorso at 2024-04-25T22:17:21+02:00 Remove notes from CVE-2024-31745 This got correctly rejected in favour of CVE-2024-2002. - - - - - 1 changed file: -

[Git][security-tracker-team/security-tracker][master] Review some rejected CVEs

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 91bead5b by Salvatore Bonaccorso at 2024-04-25T22:01:21+02:00 Review some rejected CVEs All were either unused by the CNA in the end or rejected as duplicates of other CVEs. Details are in the

[Git][security-tracker-team/security-tracker][master] Sync notes as generated by import script

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7c3124dd by Salvatore Bonaccorso at 2024-04-25T22:03:47+02:00 Sync notes as generated by import script - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add comment about sendmail

2024-04-25 Thread @rouca
) NOTE: 20240324: some issue coordinate with myself and security team (rouca) + NOTE: 20240425: need more time to investigate issue -- shim (rouca) NOTE: 20240306: Added by Front-Desk (opal) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit

[Git][security-tracker-team/security-tracker][master] pdns-rec DSA

2024-04-25 Thread Moritz Muehlenhoff (@jmm)
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: acac53b9 by Moritz Mühlenhoff at 2024-04-25T21:24:27+02:00 pdns-rec DSA - - - - - 2 changed files: - data/DSA/list - data/dsa-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] bookworm/bullseye triage

2024-04-25 Thread Moritz Muehlenhoff (@jmm)
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 2e0bccad by Moritz Muehlenhoff at 2024-04-25T17:44:51+02:00 bookworm/bullseye triage - - - - - 2 changed files: - data/CVE/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] radare2 fixed in sid

2024-04-25 Thread Moritz Muehlenhoff (@jmm)
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 7d1fbd69 by Moritz Muehlenhoff at 2024-04-25T17:05:01+02:00 radare2 fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] new social-auth-app-django issue

2024-04-25 Thread Moritz Muehlenhoff (@jmm)
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: a13af993 by Moritz Muehlenhoff at 2024-04-25T16:49:52+02:00 new social-auth-app-django issue - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] qemu fixed in sid

2024-04-25 Thread Moritz Muehlenhoff (@jmm)
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: d66e81d2 by Moritz Muehlenhoff at 2024-04-25T14:35:15+02:00 qemu fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] qemu fixed in sid

2024-04-25 Thread Moritz Muehlenhoff (@jmm)
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: b19b629f by Moritz Muehlenhoff at 2024-04-25T14:02:55+02:00 qemu fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] nodejs n/a

2024-04-25 Thread Moritz Muehlenhoff (@jmm)
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: d18510ec by Moritz Muehlenhoff at 2024-04-25T13:37:25+02:00 nodejs n/a - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] NFUs

2024-04-25 Thread Moritz Muehlenhoff (@jmm)
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 1409aa55 by Moritz Muehlenhoff at 2024-04-25T11:17:39+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ae8df104 by security tracker role at 2024-04-25T08:12:35+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] NFUs

2024-04-25 Thread Moritz Muehlenhoff (@jmm)
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 410bf268 by Moritz Muehlenhoff at 2024-04-25T09:40:17+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] new xpdf issue

2024-04-25 Thread Moritz Muehlenhoff (@jmm)
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 0a3c6d23 by Moritz Muehlenhoff at 2024-04-25T09:35:05+02:00 new xpdf issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2024-23662/FreeRDP

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1bdb41f7 by Salvatore Bonaccorso at 2024-04-25T09:25:16+02:00 Add CVE-2024-23662/FreeRDP - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2024-32875/hugo

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: be1f42b6 by Salvatore Bonaccorso at 2024-04-25T09:24:41+02:00 Add CVE-2024-32875/hugo - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process NFUs

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: fa5c0f7c by Salvatore Bonaccorso at 2024-04-25T09:23:57+02:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process NFUs

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d191669a by Salvatore Bonaccorso at 2024-04-25T09:16:38+02:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: fee5bb2d by Salvatore Bonaccorso at 2024-04-25T08:42:32+02:00 Merge Linux CVEs from kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2023-52575 (rejected by kernel CNA)

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 804e15b0 by Salvatore Bonaccorso at 2024-04-25T08:33:39+02:00 Remove notes from CVE-2023-52575 (rejected by kernel CNA) - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2024-2957 (rejected, duplicate of CVE-2024-1983)

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4f457ce5 by Salvatore Bonaccorso at 2024-04-25T08:32:05+02:00 Remove notes from CVE-2024-2957 (rejected, duplicate of CVE-2024-1983) - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2024-3514 (duplicate of CVE-2024-1846)

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a7c200db by Salvatore Bonaccorso at 2024-04-25T08:30:39+02:00 Remove notes from CVE-2024-3514 (duplicate of CVE-2024-1846) - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add upstream tag information on two openexr issues

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a45a48fd by Salvatore Bonaccorso at 2024-04-25T08:29:31+02:00 Add upstream tag information on two openexr issues - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process some NFUs

2024-04-25 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 71a0e1a0 by Salvatore Bonaccorso at 2024-04-25T08:26:31+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list