December 2022 Archives by thread
      
      Starting: Thu Dec  1 04:33:59 GMT 2022
         Ending: Sat Dec 31 20:20:52 GMT 2022
         Messages: 781
     
- [Git][security-tracker-team/security-tracker][master] 3 commits: Add link to the CVE-2022-46338
 
Anton Gladky ( at gladk)
 - [Git][security-tracker-team/security-tracker][master] CVE-2022-46338: Indent note with tab
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track upstream commit for CVE-2022-46338
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] CVE-2022-3328/snapd: Reference oss-security post
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add fixed version via unstable for CVE-2022-3697/ansible
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Change programming language for elang.
 
Anton Gladky ( at gladk)
 - [Git][security-tracker-team/security-tracker][master] automatic update
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: Track fixed version for CVE-2022-4139/linux via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] new vlc issue
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] new gitlab issues
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Process one NFU
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Process some NFUs
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Update status for CVE-2022-4139/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] snapd DSA
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] new thunderbird issue
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2022-3328/snapd
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Mark zorp as removed from every supported suite
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4520{2,4}/gpac
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2022-44577
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Process several NFUs
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-3933{1,2,3,4}/nextcloud-desktop
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: Mark CVE-2022-4520{2,4} (gpac) as end-of-life
 
Anton Gladky ( at gladk)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-1471/snakeyaml
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Mark CVE-2022-22984 as NFU
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add new nvidia-graphics-drivers-tesla issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add new nvidia-graphics-drivers-tesla-510 issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add nvidia-graphics-drivers-tesla-470 issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add nvidia-graphics-drivers-tesla-460 issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add new nvidia-graphics-drivers-tesla-450 issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Remove one entry for nvidia-graphics-drivers-tesla-460
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Drop another uneeded note
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add new nvidia-graphics-drivers-tesla-418 issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add new nvidia-graphics-drivers-legacy-390xx issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Sort tesla related packages
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add new nvidia-graphics-drivers-legacy-340xx issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add new nvidia-graphics-drivers issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] thunderbird, chromium fixed in sid
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] NFUs
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] mariadb spu
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] more mariadb spu updates
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] dla: drop vim
 
Sylvain Beucler ( at beuc)
 - [Git][security-tracker-team/security-tracker][master] dla: drop libarchive
 
Sylvain Beucler ( at beuc)
 - [Git][security-tracker-team/security-tracker][master] bullseye triage
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] new rust-capnp issue
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] NFU
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Move RUSTSEC-2022-0068 entry for rust-capnp to CVE-2022-46149
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3215-1 for snapd
 
Utkarsh Gupta ( at utkarsh)
 - [Git][security-tracker-team/security-tracker][master] new d3-color issue
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Add additional references for node-d3-color issue
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-46366 as NFU
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2022-21821/nvidia-cuda-toolkit via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2022-3715/bash
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] nextcloud-desktop no-dsa
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2022-37769/libjpeg
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-3591/vim
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-3520/vim
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3216-1 for vlc
 
Utkarsh Gupta ( at utkarsh)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3217-1 for g810-led
 
Utkarsh Gupta ( at utkarsh)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3218-1 for libpgjava
 
Utkarsh Gupta ( at utkarsh)
 - [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2022-45939/emacs via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Mark CVE-2020-23922 as unimportant
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4262/chromium
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-24999/node-qs
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4269/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] chromium DSA
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Add chromium to dsa-needed list
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Update information for CVE-2013-1841/libnet-server-perl
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] dla: ceph: reference zigo's e-mail
 
Sylvain Beucler ( at beuc)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: LTS: claim node-cached-path-relative in dla-needed.txt
 
Guilhem Moulin ( at guilhem)
 - [Git][security-tracker-team/security-tracker][master] Associate CVE-2022-29167 with node-hawk
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version via experimental for CVE-2022-46149/capnproto
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2022-29167/node-hawk via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Update status for vlc in dsa-needed list
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-3491/vim
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] 4 commits: Claim hsqldb in dla-needed.txt
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: LTS: add fusiondirectory to dla-needed.txt
 
Anton Gladky ( at gladk)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-46391/awstats
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-46405/mastodon
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for jruby issues via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for nvidia-graphics-drivers-legacy-390xx issues via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2022-4262/chromium via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2022-46391/awstats
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add note for jqueryui
 
Utkarsh Gupta ( at utkarsh)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3219-1 for jhead
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] Reserve DSA-5294-1 for jhead
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] 3 commits: Reassign jqueryui to Utkarsh.
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3220-1 for clamav
 
Utkarsh Gupta ( at utkarsh)
 - [Git][security-tracker-team/security-tracker][master] Process two NFUs
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] two more node spu
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2022-41853,hsqldb: fixed in unstable
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: LTS: add awstats to dla-needed.txt
 
Anton Gladky ( at gladk)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3221-1 for node-cached-path-relative
 
Guilhem Moulin ( at guilhem)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3222-1 for node-fetch
 
Guilhem Moulin ( at guilhem)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2022-46391/awstats
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2022-39377/sysstat
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity
 
Anton Gladky ( at gladk)
 - [Git][security-tracker-team/security-tracker][master] 7 commits: Triage CVE-2022-30256 in maradns for buster LTS.
 
Chris Lamb ( at lamby)
 - [Git][security-tracker-team/security-tracker][master] Take http-parser
 
Utkarsh Gupta ( at utkarsh)
 - [Git][security-tracker-team/security-tracker][master] Take awstats
 
Utkarsh Gupta ( at utkarsh)
 - [Git][security-tracker-team/security-tracker][master] Process NFUs
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Claim virglrenderer.
 
Tobias Frost ( at tobi)
 - [Git][security-tracker-team/security-tracker][master] triage giflib and reserve DLA-3223-1
 
Helmut Grohne ( at helmutg)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3224-1 for http-parser
 
Utkarsh Gupta ( at utkarsh)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3225-1 for awstats
 
Utkarsh Gupta ( at utkarsh)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: Adjust version for CVE-2018-11489/giflib
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2022-40159,CVE-2022-40160,libcommons-jxpath-java
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] new rxvt-unicode issue
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] additional note on rxvt-unicode
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] lts: claim cgal
 
Helmut Grohne ( at helmutg)
 - [Git][security-tracker-team/security-tracker][master] Update information for CVE-2022-4170/rxvt-unicode
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2022-4170/rxvt-unicode
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4293/vim
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4292/vim
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-419{68,69,70}/nextcloud-server
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-20565/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-20566/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-20567/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-20568/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-20572/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add notes for CVE-2022-20573
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for nvidia-graphics-drivers-tesla-450 issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2020-35539
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add new asterisk issues (AST-2022-00{7,8,9})
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] triage cgal and issue DLA-3226-1
 
Helmut Grohne ( at helmutg)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for unstable for CVE-2020-35511
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Take ruby-*
 
Utkarsh Gupta ( at utkarsh)
 - [Git][security-tracker-team/security-tracker][master] CVE-2022-21797 still affects joblib in buster
 
Helmut Grohne ( at helmutg)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: Add fixed version for gnome-sushi CVE-2019-19308
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] new python-git issue
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] allocate DSA for xfce4-settings
 
Yves-Alexis Perez ( at corsac)
 - [Git][security-tracker-team/security-tracker][master] dla: add note for net-snmp
 
Sylvain Beucler ( at beuc)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3227-1 for ruby-rails-html-sanitizer
 
Utkarsh Gupta ( at utkarsh)
 - [Git][security-tracker-team/security-tracker][master] Take node-log4js and node-json-schema
 
Utkarsh Gupta ( at utkarsh)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3228-1 for node-json-schema
 
Utkarsh Gupta ( at utkarsh)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3229-1 for node-log4js
 
Utkarsh Gupta ( at utkarsh)
 - [Git][security-tracker-team/security-tracker][master] Add new linux issues from XSA-423 and XSA-424
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Inline notes for CVE-2020-28601 with remaining TALOS-2020-1225 issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Update status for CVE-2022-21797
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-46169/cacti
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2022-46169/cacti
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] vlc DSA
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Track fix via experimental for CVE-2022-2347/u-boot
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage dlt-daemon for buster LTS (CVE-2022-31291)
 
Chris Lamb ( at lamby)
 - [Git][security-tracker-team/security-tracker][master] Take node-moment and dlt-daemon
 
Utkarsh Gupta ( at utkarsh)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4314/rdiffweb
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3230-1 for jqueryui
 
Utkarsh Gupta ( at utkarsh)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3231-1 for dlt-daemon
 
Utkarsh Gupta ( at utkarsh)
 - [Git][security-tracker-team/security-tracker][master] p0 reference for pixman issue
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3232-1 for virglrenderer
 
Tobias Frost ( at tobi)
 - [Git][security-tracker-team/security-tracker][master] Track proposed update for CVE-2022-38266 via bullseye-pu
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track proposed update for CVE-2021-3639 via bullseye-pu
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track proposed update for nvidia-graphics-drivers-tesla-450 via bullseye-pu
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track proposed update for CVE-2022-0135 via bullseye-pu
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2022-46149/capnproto via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2020-35539
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track proposed nvidia-graphics-drivers-legacy-390xx changes via bullseye-pu
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track proposed update for CVE-2022-46391 via bullseye-pu
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2022-46169/cacti via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2022-41912/golang-github-crewjam-saml
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Update information on CVE-2022-45061/python
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Update information for CVE-2022-37454/python
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage cacti for buster LTS (CVE-2022-46169)
 
Chris Lamb ( at lamby)
 - [Git][security-tracker-team/security-tracker][master] 3 commits: Triage CVE-2022-3697 in ansible for buster LTS.
 
Chris Lamb ( at lamby)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-23471/containerd
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4223/pgadmin4, itp'ed
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] CVE-2020-14424 (cacti) mark it as not affecting bullseye and buster
 
Paul Gevers ( at elbrus)
 - [Git][security-tracker-team/security-tracker][master] triage CVE-2018-5710
 
Helmut Grohne ( at helmutg)
 - [Git][security-tracker-team/security-tracker][master] dla: claim git
 
Sylvain Beucler ( at beuc)
 - [Git][security-tracker-team/security-tracker][master] reserve DLA-3233-1 for leptonlib
 
Helmut Grohne ( at helmutg)
 - [Git][security-tracker-team/security-tracker][master] new go issues
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] nvidia-graphics-drivers-tesla-470 fixed in sid
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2022-24765/git: reference further fixes
 
Sylvain Beucler ( at beuc)
 - [Git][security-tracker-team/security-tracker][master] Add commit references for CVE-2022-41717
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add grub2 to dla-needed list
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for asterik issues via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track proposed wolfssl update via bullseye-pu
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track proposed update for CVE-2022-23471 via bullseye-pu
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for linux issues via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Take gerbv again
 
Aron Xu ( at aron)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-46153/traefik, itp'ed
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Reassociate some NFUs with traefik, itp'ed
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage asterisk for buster LTS (CVE-2022-39244 & CVE-2022-39269)
 
Chris Lamb ( at lamby)
 - [Git][security-tracker-team/security-tracker][master] lts: retake php7.3
 
Emilio Pozuelo Monfort ( at pochu)
 - [Git][security-tracker-team/security-tracker][master] containerd no-dsa
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] two asterisk issues not actually fixed in latest upload to sid
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Remove notes for CVE-2022-20565
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2022-20573
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] mplayer spu
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] nvidia-graphics-drivers-tesla-470 spu
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] nvidia-graphics-drivers spu
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4378/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] cacti DSA
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Track proposed update for linux via bullseye-pu
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] LTS: Add testsuites to the packages
 
Anton Gladky ( at gladk)
 - [Git][security-tracker-team/security-tracker][master] four airflow related  issues not in airflow itself
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] libde265 bug for RCE issues (followup bug for lower severity crashes coming)
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-3724/wireshark
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Two asterisk issues fixed in unstable upload
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2022-46149/rust-capnp
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3190-2 for grub2
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixes for nvidia-graphics-drivers via unstable for several CVEs
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Claim pngcheck.
 
Tobias Frost ( at tobi)
 - [Git][security-tracker-team/security-tracker][master] Claim libde265 (while waiting for feedback on pngcheck)
 
Tobias Frost ( at tobi)
 - [Git][security-tracker-team/security-tracker][master] additional Linux exploit reference
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3234-1 for hsqldb
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] Reserve DSA-5299-1 for openexr
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-44030/redmine
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-45283/gpac
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add set of new xrdp issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-23469/traefik, itp'ed
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Correct note for CVE-2022-46169/cacti
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-23493/xrdp
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Update status for sofia-sip DSA
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add Debian bug references for xrdp issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Mark CVE-2022-45283/gpac as EOL in gpac for buster LTS.
 
Chris Lamb ( at lamby)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-43272/dcmtk
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3235-1 for node-eventsource
 
Guilhem Moulin ( at guilhem)
 - [Git][security-tracker-team/security-tracker][master] LTS: claim node-tar in dla-needed.txt
 
Guilhem Moulin ( at guilhem)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: LTS: add asterisk to dla-needed.txt
 
Anton Gladky ( at gladk)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2021-37533/libcommons-net-java
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] LTS: claim exiv2
 
Helmut Grohne ( at helmutg)
 - [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2021-37533
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4398/radare2
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4399/nodau
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2022-4399/nodau via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add note for gerbv in dsa-needed list
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3236-1 for openexr
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] Claim mbedtls in dla-needed.txt
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] LTS: Reclaim netatalk
 
Anton Gladky ( at gladk)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-45145 but retain todo item for now
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] new wireshark issues
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3237-1 for node-tar
 
Guilhem Moulin ( at guilhem)
 - [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim node-follow-redirects.
 
Chris Lamb ( at lamby)
 - [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim node-hawk.
 
Chris Lamb ( at lamby)
 - [Git][security-tracker-team/security-tracker][master] chicken n/a
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] pngcheck DSA
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] LTS: reclaim imagemagick and update notes
 
Roberto C. Sánchez ( at roberto)
 - [Git][security-tracker-team/security-tracker][master] Update status for CVE-2022-3724/wireshark
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-46908/sqlite3
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for nvidia-graphics-drivers-tesla-510 issues via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4318/cri-o, itp'ed
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] lts: take firefox-esr and thunderbird
 
Emilio Pozuelo Monfort ( at pochu)
 - [Git][security-tracker-team/security-tracker][master] new openssl issue
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3238-1 for pngcheck
 
Tobias Frost ( at tobi)
 - [Git][security-tracker-team/security-tracker][master] Restore fixed status of pngcheck in 2.3.0-7+deb10u1 for CVE-2020-27818
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add new firefox issues from mfsa2022-51 advisory
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add firefox-esr issues from mfsa2022-52
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add thunderbird issues from mfsa2022-53
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] new jquery-minicolors issue
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] new python-pyrdfa issue
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3239-1 for git
 
Sylvain Beucler ( at beuc)
 - [Git][security-tracker-team/security-tracker][master] new redmine issues
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] bugnums
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2019-25078/pacparser
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for nvidia-graphics-drivers-tesla issues via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for thunderbird issues via unstable (MFSA 2022-53)
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add fixed version for firefox issues via unstable  (mfsa2022-51)
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track firefox-esr fixes for mfsa2022-52
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add firefox-esr and thunderbird to dsa-needed list (jmm assigned)
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-46340/xorg-server
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-46341/xorg-server
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-46342/xorg-server
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-46343/xorg-server
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-46344/xorg-server
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4283/xorg-server
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add new chromium issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add two new tensorflow issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add two new netty issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add Debian bug references for xorg-server issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] chromium fixed in sid
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] xorg-server fixed in sid
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] one more xorg issue
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Revert "one more xorg issue"
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2022-4283
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2022-4396/python-pyrdfa
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track proposed update for ceph via bullseye-pu
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add xorg-server to dsa-needed list
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] new libapache2-mod-auth-openidc issue
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] new ruby-loofah issues
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Adjust GHSA reference for CVE-2022-23514
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: Add upstream tag information for CVE-2022-23527
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track two more xwayland issues as fixed with 2:22.1.5-1 upload to unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] firefox-esr DSA
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3239-2 for git
 
Sylvain Beucler ( at beuc)
 - [Git][security-tracker-team/security-tracker][master] dla: claim tiff
 
Sylvain Beucler ( at beuc)
 - [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-25078/pacparser
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2022-3931
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add four new ruby-rails-html-sanitizer issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4379/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4382/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for mruby issues via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for bluez-firmware issues via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4285/binutils
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-3115/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-3114/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-3113/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-3112/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-3111/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-3110/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-3108/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-3107/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-3106/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-3105/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-3104/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] new ffmpeg issue
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] new nokogiri issue
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] qemu fixed in sid
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] CVE-2022-1253 does not affect buster and stretch.
 
Tobias Frost ( at tobi)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3240-1 for libde2565.
 
Tobias Frost ( at tobi)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3241-1 for firefox-esr
 
Emilio Pozuelo Monfort ( at pochu)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3242-1 for thunderbird
 
Emilio Pozuelo Monfort ( at pochu)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3243-1 for php7.3
 
Emilio Pozuelo Monfort ( at pochu)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2022-23476: Only reference to commit addressing the issue
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track erlang update for bullseye-pu
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-32531/bookkeeper
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-23524/helm-kubernetes
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-23494/tinymce
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-45141/samba
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Update information for CVE-2022-37967
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Update information for CVE-2022-37966
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Update information for CVE-2022-38023
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Associate CVE-2022-44640 as well for samba
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4516
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Grab lava once again
 
Dominik George ( at natureshadow)
 - [Git][security-tracker-team/security-tracker][master] LTS: claim multipath-tools in dla-needed.txt
 
Tobias Frost ( at tobi)
 - [Git][security-tracker-team/security-tracker][master] chromium, thunderbird DSAs
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] fix CVE list
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2022-32531/bookkeeper
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Pre-check list of uploads for 11.6 bullseye point release
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Remove duplicate entries for mplayer
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Update status for CVE-2022-4379 syncing with kernel-sec
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-2196/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add two new sogo issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add two new mbedtls issues fixed in unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-23525/helm-kubernetes
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add missing entry for nvidia-graphics-driver for CVE-2022-34674
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4543/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add blog entry for CVE-2022-4543
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2022-20463 (rejected, was not a security issue)
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: Add commit references for CVE-2022-2873
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add commit reference for CVE-2022-36280
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add upstream commit reference for CVE-2022-41218
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add upstream commits for CVE-2022-4129
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Sync several CVEs for linux with kernel-sec
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] 3 commits: Merge linux changes for bullseye 11.6
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2022-29181/ruby-nokogiri
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add fixed version via unstable for CVE-2022-23476/ruby-nokogiri
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add upstream tag information for CVE-2022-23476
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2022-353{1,2}
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2022-46908/sqlite3
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVe-2022-47518/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-47519
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2022-46908/sqlite3 via unstable
 
László Böszörményi ( at gcs)
 - [Git][security-tracker-team/security-tracker][master] LTS: claim cacti in dla-needed.txt
 
Guilhem Moulin ( at guilhem)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-47520/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-47521/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add two new libjettison-java issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for dpdk issues via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Take libetpan
 
Utkarsh Gupta ( at utkarsh)
 - Processing c40dfd1e4993e05de8e2d095c3ef538b1522d8ae failed
 
security tracker role
 - [Git][security-tracker-team/security-tracker][master] Track proposed update for CVE-2022-46146 via bullseye-pu
 
Salvatore Bonaccorso ( at carnil)
 - Processing 6ab635a9f073e78c9b51c85aafdd4fda9b9c21ff failed
 
security tracker role
 - [Git][security-tracker-team/security-tracker][master] caddy entered the archive, mark as unfixed for pending review status
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Review status for caddy issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add three new trafficserver issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add notes for CVE-2021-33640
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4515/exuberant-ctags
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Give back lava
 
Dominik George ( at natureshadow)
 - [Git][security-tracker-team/security-tracker][master] isakpmd removed
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for xrdp issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add tracking bug for CVE-2022-23527
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] whohas, ppp non issues
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] new multimon-ng issue
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3244-1 for linux-5.10
 
Ben Hutchings ( at benh)
 - [Git][security-tracker-team/security-tracker][master] Track fixes in last bullseye point release for linux which got forgotten
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track proposed update for libapache2-mod-auth-openidc via bullseye-pu
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add new libksba entry (pending CVE assignment)
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add upstream tag reference for CVE-2020-36619
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for libksba issue
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4415/systemd
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Mark kvmtool as removed from unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Mark kvmtool as removed from any supported suite
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] new haskell-xml-conduit issue
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] new znuny issue
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Reserve DSA number for xorg-server update
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] 4 commits: CVE-2022-4415: mention upstream stable tree fix
 
Luca Boccassi ( at bluca)
 - Processing cbcf0ca5db58077f858e18977bddf7c17590dad8 failed
 
security tracker role
 - [Git][security-tracker-team/security-tracker][master] 2 commits: data/CVE/list: Fix "release notes not ordered properly"
 
Ben Hutchings ( at benh)
 - [Git][security-tracker-team/security-tracker][master] (Partially) revert "CVE-2022-4415: mention upstream stable tree fix"
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Remove notes for CVE-2022-3535 (rejected)
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add assigned CVE for libksba issue
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Update status for CVE-2022-42896/linux according to kernel-sec tracking
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Mark CVE-2022-3542 as unimportant
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Clarify unimportant status for CVE-2022-3542
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-46421 as NFU
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Remove notes for CVE-2022-3542 (confirmed rejection by VulDB)
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2022-35253
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] CVE-2021-46144: mark sid/bookworm as fixed.
 
Guilhem Moulin ( at guilhem)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-43552/curl
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-43551/curl
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] ATS fixed in sid
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] add ATS commit refs
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Add libksba to dsa-needed file
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] znuny fixed in sid
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] link advisory for systemd-coredump
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Properly sort the releases for CVE-2020-13776
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add Debian bug references for new curl issues: CVE-2022-4355{1,2}
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2022-4415/systemd
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-40145/apache-karaf
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-433{7,8}/openvswitch
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add upstream tag information for CVE-2021-4249
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Reserve DSA number for libksba update
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] add writeup for CVE-2022-2602
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for ghostwriter issues via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add information on CVE-2022-38065/python-oslo.privsep
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Process two new rdiffweb issues, itp'ed
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] CVE-2022-4415: fix affected version, note on prep commit
 
Luca Boccassi ( at bluca)
 - [Git][security-tracker-team/security-tracker][master] CVE-2022-4415: mark as ignored for buster
 
Luca Boccassi ( at bluca)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2020-25265/libappimage
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] curl fixed in sid
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] systemd fixed in sid
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Remove firefox-esr from dsa-needed list
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] sslh n/a
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] new zabbix issues
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] zabbix bugnum
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2022-4516
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-1887/firefox (only affecting iOS)
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add information of retrospectively added CVE-2022-3266/thunderbird
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add information for CVE-2022-3266 covering firefox and firefox-esr
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-46882/firefox
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-46883/firefox (mfsa-2022-47)
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-46881/firefox (mfsa-2022-44)
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-46885/firefox
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Take nodejs
 
Aron Xu ( at aron)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3246-1 for node-hawk
 
Chris Lamb ( at lamby)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4662/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Mark CVE-2022-0536 in node-follow-redirects as ignored in Buster LTS; this follows CVE-2022-0155.
 
Chris Lamb ( at lamby)
 - [Git][security-tracker-team/security-tracker][master] 3 commits: Drop extra whitespace.
 
Chris Lamb ( at lamby)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: dla-needed.txt: Add note for node-object-path.
 
Chris Lamb ( at lamby)
 - [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim node-trim-newlines.
 
Chris Lamb ( at lamby)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3247-1 for node-trim-newlines
 
Chris Lamb ( at lamby)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4665/ampache
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add two CVEs for codeigniter, itp'ed
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-47941/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-47942/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-47943
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-47938/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-47939/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-47940/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] curl: Set fixed versions for CVE-2021-22923 and CVE-2021-22922
 
Samuel Henrique ( at samueloph)
 - [Git][security-tracker-team/security-tracker][master] Add first batch of openimageio issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-47946/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add some rdiffweb issues (itp'ed)
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] retroarch/libstb code copy fixed
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3248-1 for libksba
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for libarchive issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-47{28,29,30}/graphite-web
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4793{2,3,4}/brave-browser
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4438{0,1}/snipe-it
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-23551 as NFU
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] new mediawiki issue
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] 18 commits: CVE-2022-46393,mbedtls: Buster and Bullseye are not affected
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] LTS: add openimageio to dla-needed.txt
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2022-46149/rust-capnp via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Reference fix for CVE-2022-4515
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for graphite-web issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Refer to universal-ctags as well for CVE-2022-4515
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Spit CVE-2022-37155 from the temporary entry for DSA-5190-1/spip
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2022-4515
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] CVE-2022-46393,mbedtls: buster and bullseye are not affected
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-23547/{asterik,ring,pjproject}
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add two new CVEs for BigBlueButton
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Update notes for CVE-2022-3854/ceph
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Process CVE-2022-0517 as NFU
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Mark CVE-2021-31650 as NFU
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2021-4129/{firefox*,thunderbird} from mfsa2021-{52,53,54}
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2022-46392,mbedtls: mark Buster as postponed
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] dla: update tiff status
 
Sylvain Beucler ( at beuc)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for multipath-tools fixed via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add second batch of openimageio CVEs from TALOS reports
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim exuberant-ctags.
 
Chris Lamb ( at lamby)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2022-4515
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2022-45199/pillow
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Process CVE-2022-23746 as NFU
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-23526/helm-kubernetes
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-23513 as NFU
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Reference upstream commit for CVE-2022-38223/w3m
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2020-36627/golang-github-go-macaron-i18n
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] fix fixed version for tesla-45 upload in last bullseye point release
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] systemd spu
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Add curl to dsa-needed list
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Take care of releasing Aron's gerbv update
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add two new CVEs for intellij-idea, itp'ed
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add another batch of openimageio issues as reported by TALOS project
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add note for multipath-tools in dsa-needed list
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Reserve DSA number for gerbv update
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-46175/node-json5
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2021-35065/node-glob-parent
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: Ignore CVE-2022-3287 for buster - vulnerable code was introduced later
 
Stefano Rivera ( at stefanor)
 - [Git][security-tracker-team/security-tracker][master] CVE-2021-37533,libcommons-net-java: fixed in unstable
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] Reference upstream commit for CVE-2022-3996/openssl
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-3996/openssl bug reference
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2021-4287/binwalk
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] curl: Set CVE-2022-42916 and CVE-2022-43551 as not affected for buster and bullseye
 
Samuel Henrique ( at samueloph)
 - Processing 7695cf3ab7d2d58b25e80283aca110b158155785 failed
 
security tracker role
 - [Git][security-tracker-team/security-tracker][master] Marked first batch of CVEs for nvidia-graphics-drivers package as no-dsa for...
 
Ola Lundqvist ( at opal)
 - [Git][security-tracker-team/security-tracker][master] LTS: add emacs to dla-needed.txt
 
Ola Lundqvist ( at opal)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: Decided to postpone CVE-2022-47927 for buster followint the decision for bullseye.
 
Ola Lundqvist ( at opal)
 - [Git][security-tracker-team/security-tracker][master] curl: Mark CVE-2021-22923 and CVE-2021-22922 as not-affected
 
Samuel Henrique ( at samueloph)
 - [Git][security-tracker-team/security-tracker][master] Marked second batch of CVEs for nvidia-graphics-drivers package as no-dsa for...
 
Ola Lundqvist ( at opal)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: LTS: add apache2 to dla-needed.txt
 
Ola Lundqvist ( at opal)
 - [Git][security-tracker-team/security-tracker][master] Mark CVE-2022-42916 and CVE-2022-43551 as ignored
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Correct state back to not-affected for two curl issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Drop not-affected status for CVE-2021-2292{2,3}
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Associate CVE-2022-4556 bullseye's entry with sogo
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Mark CVE-2022-46392/mbedtls as no-dsa for bullseye
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2019-14802/nomad
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Remove notes for CVE-2022-45119 and CVE-2022-43503
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Update information form WebKitGTK and WPE WebKit Security Advisory WSA-2022-0011
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add webkit2gtk and wpewebkit to dsa-needed list
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Claim trafficserver
 
Aron Xu ( at aron)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: Process some NFUs
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Unclaim trafficserver
 
Aron Xu ( at aron)
 - [Git][security-tracker-team/security-tracker][master] new rust-prettytable-rs issue
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] add python-git reference
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] vim fixed in sid
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2021-3574/imagemagick
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2022-43272/dcmtk
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] add commit reference for libetpan
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim emacs.
 
Chris Lamb ( at lamby)
 - [Git][security-tracker-team/security-tracker][master] Remove notes from now rejected CVE (former usememos)
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Record upstream commits for CVE-2022-1949/389-ds-base
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Record upstream tag commit for CVE-2022-2850
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] golang-github-containers-psgo spu
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3250-1 for multipath-tools
 
Tobias Frost ( at tobi)
 - [Git][security-tracker-team/security-tracker][master] Reference new place of upstream issue for CVE-2021-34434/mosquitto
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] CVE-2021-41039: reference location of upstream issue on gitlab instance
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] jython fixed in sid
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Reference upstream commit for CVE-2022-3479/nss
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Update information for CVE-2022-433{7,8}/openvswitch
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add reference to upstream issue for CVE-2022-26635/php-memcached
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for two openvswitch issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] CVE-2021-34145 - CVE-2021-34148 in bluez-firmware have been introduced only...
 
Tobias Frost ( at tobi)
 - [Git][security-tracker-team/security-tracker][master] Adjust version information for bluez-firmware
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for rust-prettytable-rs issue
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] cakephp, libyang removed
 
Moritz Muehlenhoff ( at jmm)
 - [Git][security-tracker-team/security-tracker][master] Mark phamm as removed from unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Mark phamm as removed from the archive in every supported suite
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Mark libapache2-mod-ruid2 as removed from everywhere supported
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Downgrade severity for CVE-2021-45346/sqlite3
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Claim hsqldb in dsa-needed.txt
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4843/radare2
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2020-28589/tinyobjloader via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2022-44721 (rejected by assigning CNA as duplicate)
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3251-1 for libcommons-net-java
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2022-4121 via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2022-23967 (duplicate of CVE-2019-15679)
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Claim libjettison-java, libitext5-java and netty and dla-needed.txt
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] Reserve DSA-5307-1 libcommons-net-java
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] 4 commits: Marked CVE-2021-35065 as no-dsa for buster following decision for bullseye.
 
Ola Lundqvist ( at opal)
 - [Git][security-tracker-team/security-tracker][master] claim mplayer
 
Thorsten Alteholz ( at alteholz)
 - [Git][security-tracker-team/security-tracker][master] claim xorg-server
 
Thorsten Alteholz ( at alteholz)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4842/linux
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Process CVE-2014-125026 as NFU
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim openvswitch.
 
Chris Lamb ( at lamby)
 - [Git][security-tracker-team/security-tracker][master] Add commit references for CVE-2022-4479{2,3}/net-snmp
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2018-25052/libcatalyst-plugin-session-perl
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add two more openimageio issues
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: LTS: add graphite-web to dla-needed.txt
 
Ola Lundqvist ( at opal)
 - [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2022-22728 via unstable
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-2582/golang-github-aws-aws-sdk-go
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-36437/hazelcast, itp'ed
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-31746/firefox (mfsa2022-27)
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-23467/openrazer
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-23491/python-certifi
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-23537/{asterisk,ring,pjproject}
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2021-4221/firefox
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2020-36567/golang-github-gin-gonic-gin
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-41966/libxstream-java
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Marked CVE-2022-23467 as no-dsa since physical access is necessary to exploit the vulnerability.
 
Ola Lundqvist ( at opal)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2018-25060/golang-github-go-macaron-csrf
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Process CVE-2019-9579 as NFU
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add note on webkit2gtk in dla-needed list
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] webkit2gtk DSA-5308-1 and wpewebkit DSA-5309-1
 
Alberto Garcia ( at berto)
 - [Git][security-tracker-team/security-tracker][master] 3 commits: LTS: claim node-loader-utils in dla-needed.txt
 
Guilhem Moulin ( at guilhem)
 - [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4864/froxlor, itp'ed
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Associate some NFUs with itp entry for froxlor
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Add references for commits for CVE-2021-3638/qemu
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Reserve DSA number for ruby-image-processing update
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] CVE-2022-40150,  CVE-2022-45685, CVE-2022-45693,libjettison-java: fixed in
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3253-1 for openvswitch
 
Chris Lamb ( at lamby)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3254-1 for exuberant-ctags
 
Chris Lamb ( at lamby)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3255-1 for mplayer
 
Thorsten Alteholz ( at alteholz)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3256-1 for xorg-server
 
Thorsten Alteholz ( at alteholz)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3257-1 for emacs
 
Chris Lamb ( at lamby)
 - [Git][security-tracker-team/security-tracker][master] Marked CVE-2020-36367 as no-dsa since it is a minor issue.
 
Ola Lundqvist ( at opal)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: Marked CVE-2018-25060 as no-dsa for buster since it is a minor issue.
 
Ola Lundqvist ( at opal)
 - [Git][security-tracker-team/security-tracker][master] 3 commits: LTS: add 389-ds-base to dla-needed.txt
 
Ola Lundqvist ( at opal)
 - [Git][security-tracker-team/security-tracker][master] Marked CVE-2022-23520, CVE-2022-23519 and CVE-2022-23517 as no-dsa or postponed for bustser.
 
Ola Lundqvist ( at opal)
 - [Git][security-tracker-team/security-tracker][master] 3 commits: Marked CVE-2022-23514 and CVE-2022-23516 as no-dsa for buster.
 
Ola Lundqvist ( at opal)
 - [Git][security-tracker-team/security-tracker][master] Marked CVE-2020-23599 as no-dsa for buster.
 
Ola Lundqvist ( at opal)
 - [Git][security-tracker-team/security-tracker][master] 2 commits: LTS: add ruby-sidekiq to dla-needed.txt
 
Ola Lundqvist ( at opal)
 - [Git][security-tracker-team/security-tracker][master] Merge notes in dla-needed referring to ruby-sidekiq
 
Salvatore Bonaccorso ( at carnil)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3258-1 for node-loader-utils
 
Guilhem Moulin ( at guilhem)
 - [Git][security-tracker-team/security-tracker][master] Reserve DLA-3259-1 for libjettison-java
 
Markus Koschany ( at apo)
 - [Git][security-tracker-team/security-tracker][master] LTS: claim node-xmldom in dla-needed.txt
 
Guilhem Moulin ( at guilhem)
 - [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: claim xrdp
 
Abhijith PA ( at abhijith)
 - [Git][security-tracker-team/security-tracker][master] Add two CVes for froxlor, itp'ed
 
Salvatore Bonaccorso ( at carnil)
    
 
    
      Last message date: 
       Sat Dec 31 20:20:52 GMT 2022
    Archived on: Sat Dec 31 20:20:56 GMT 2022
    
   
     
     
     This archive was generated by
     Pipermail 0.09 (Mailman edition).