[Git][security-tracker-team/security-tracker][master] LTS: update gpac notes in dla-needed.txt

2022-04-27 Thread @roberto
(roberto) NOTE: 20220413: New CVEs continue flooding in (roberto) + NOTE: 20220427: Preparing to work with security team to declare EOL (roberto) -- icingaweb2 (Abhijith PA) -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit

[Git][security-tracker-team/security-tracker][master] automatic update

2022-04-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f9a81025 by security tracker role at 2022-04-27T20:10:25+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] buster/bullseye triage

2022-04-27 Thread Moritz Muehlenhoff (@jmm)
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 3512b536 by Moritz Muehlenhoff at 2022-04-27T20:07:08+02:00 buster/bullseye triage - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] chromium DSA

2022-04-27 Thread Moritz Muehlenhoff (@jmm)
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 95fa19dc by Moritz Mühlenhoff at 2022-04-27T19:55:56+02:00 chromium DSA - - - - - 2 changed files: - data/DSA/list - data/dsa-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Triage CVE-2022-28739 in ruby2.3 for stretch LTS.

2022-04-27 Thread Chris Lamb (@lamby)
Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: d03435d4 by Chris Lamb at 2022-04-27T09:08:39-07:00 Triage CVE-2022-28739 in ruby2.3 for stretch LTS. - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage ruby-devise-two-factor for stretch LTS (CVE-2021-43177)

2022-04-27 Thread Chris Lamb (@lamby)
: 20220427: Patch does not apply cleanly to LTS version, may be due to this being the result + NOTE: 20220427: of an incomplete fix to CVE-2015-7225. Will require some investigation. (lamby) +-- salt -- samba View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker

[Git][security-tracker-team/security-tracker][master] 2 commits: Triage CVE-2022-28391 in busybox for stretch LTS.

2022-04-27 Thread Chris Lamb (@lamby)
Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: 9ea40503 by Chris Lamb at 2022-04-27T08:46:17-07:00 Triage CVE-2022-28391 in busybox for stretch LTS. - - - - - abdbd0a4 by Chris Lamb at 2022-04-27T08:46:49-07:00 Triage CVE-2022-1304 in e2fsprogs for

[Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity

2022-04-27 Thread Jeremiah C. Foster (@jeremiah)
Jeremiah C. Foster pushed to branch master at Debian Security Tracker / security-tracker Commits: 23a281b6 by Jeremiah C. Foster at 2022-04-27T11:16:17-04:00 semi-automatic unclaim after 2 weeks of inactivity Signed-off-by: Jeremiah C. Foster jerem...@jeremiahfoster.com - - - - - 1

[Git][security-tracker-team/security-tracker][master] new htmldoc non issue

2022-04-27 Thread Moritz Muehlenhoff (@jmm)
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: b5ff5faf by Moritz Muehlenhoff at 2022-04-27T16:59:50+02:00 new htmldoc non issue new gitlab issues NFUs - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] various bugnums

2022-04-27 Thread Moritz Muehlenhoff (@jmm)
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 68736fcb by Moritz Mühlenhoff at 2022-04-27T14:31:28+02:00 various bugnums - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] 2 commits: Update ansible status in dla-needed.txt

2022-04-27 Thread Markus Koschany (@apo)
: after that LTS. (apo) NOTE: 20210426: https://people.debian.org/~apo/lts/ansible/ + NOTE: 20220427: Lee Garrett (maintainer) took over the work a while ago. See + NOTE: 20220427: https://salsa.debian.org/debian/ansible/-/commits/stretch/ -- asterisk -- @@ -51,7 +53,7 @@ gerbv NOTE

[Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2022-29458/ncurses

2022-04-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 91e9e315 by Salvatore Bonaccorso at 2022-04-27T13:53:13+02:00 Track fixed version via unstable for CVE-2022-29458/ncurses - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] buster/bullseye triage

2022-04-27 Thread Moritz Muehlenhoff (@jmm)
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: f832a040 by Moritz Muehlenhoff at 2022-04-27T13:52:12+02:00 buster/bullseye triage new busybox issue - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-27239/cifs-utils

2022-04-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1c39e281 by Salvatore Bonaccorso at 2022-04-27T13:44:03+02:00 Add CVE-2022-27239/cifs-utils - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] 2 commits: lts: take openvpn

2022-04-27 Thread Emilio Pozuelo Monfort (@pochu)
Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 6f78fc81 by Emilio Pozuelo Monfort at 2022-04-27T11:06:35+02:00 lts: take openvpn - - - - - bd79bfa2 by Emilio Pozuelo Monfort at 2022-04-27T11:06:46+02:00 Correct triage for

[Git][security-tracker-team/security-tracker][master] Add Debian bug referneces for curl issues

2022-04-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: adc1880f by Salvatore Bonaccorso at 2022-04-27T10:23:35+02:00 Add Debian bug referneces for curl issues - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process some NFUs

2022-04-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9a72bc74 by Salvatore Bonaccorso at 2022-04-27T10:15:21+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process some CVEs for zammad, itp'ed

2022-04-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: af6e65a3 by Salvatore Bonaccorso at 2022-04-27T10:14:41+02:00 Process some CVEs for zammad, itped - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add freerdp source package for CVE-2022-2488{2,3}

2022-04-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1052e69d by Salvatore Bonaccorso at 2022-04-27T10:10:48+02:00 Add freerdp source package for CVE-2022-2488{2,3} - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] automatic update

2022-04-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a68aa4fc by security tracker role at 2022-04-27T08:10:27+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-2488{2,3}/freerdp2

2022-04-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 48491567 by Salvatore Bonaccorso at 2022-04-27T09:30:37+02:00 Add CVE-2022-2488{2,3}/freerdp2 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process NFUs

2022-04-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3d4cafa7 by Salvatore Bonaccorso at 2022-04-27T09:25:28+02:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] 2 commits: Add CVE-2022-1475/ffmpeg

2022-04-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 66e911bd by Salvatore Bonaccorso at 2022-04-27T09:18:52+02:00 Add CVE-2022-1475/ffmpeg - - - - - 4a212780 by Salvatore Bonaccorso at 2022-04-27T09:19:17+02:00 Track CVE which was fixed in the

[Git][security-tracker-team/security-tracker][master] Process CVE-2022-1466 as NFU

2022-04-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9ba35c66 by Salvatore Bonaccorso at 2022-04-27T09:12:07+02:00 Process CVE-2022-1466 as NFU - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process two NFUs in convert2rhel

2022-04-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 688dcbeb by Salvatore Bonaccorso at 2022-04-27T09:07:19+02:00 Process two NFUs in convert2rhel - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process CVE-2021-3523 as NFU

2022-04-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 62f8362d by Salvatore Bonaccorso at 2022-04-27T09:06:11+02:00 Process CVE-2021-3523 as NFU - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add chromium to dsa-needed list

2022-04-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 014cfc6c by Salvatore Bonaccorso at 2022-04-27T09:05:06+02:00 Add chromium to dsa-needed list - - - - - 1 changed file: - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Update information for CVE-2022-2777{4,5,6}/curl

2022-04-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 27298ada by Salvatore Bonaccorso at 2022-04-27T09:03:32+02:00 Update information for CVE-2022-2777{4,5,6}/curl - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add new chromium issues

2022-04-27 Thread Salvatore Bonaccorso (@carnil)
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 28782068 by Salvatore Bonaccorso at 2022-04-27T08:59:22+02:00 Add new chromium issues - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] CVE-2022-27774, CVE-2022-27775, CVE-2022-27776

2022-04-27 Thread Henri Salo (@hsalo-guest)
Henri Salo pushed to branch master at Debian Security Tracker / security-tracker Commits: 9f681b89 by Henri Salo at 2022-04-27T09:55:35+03:00 CVE-2022-27774, CVE-2022-27775, CVE-2022-27776 - - - - - 1 changed file: - data/CVE/list Changes: =