[Git][security-tracker-team/security-tracker][master] Process one NFU

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ecc04bb4 by Salvatore Bonaccorso at 2022-09-05T06:53:04+02:00 Process one NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Reserve DLA-3099-1 for qemu

- security update {CVE-2022-0367} [buster] - libmodbus 3.1.4-2+deb10u2 = data/dla-needed.txt = @@ -90,13 +90,6 @@ poppler (Markus Koschany) python-oslo.utils NOTE: 20220904: Programming language: Python

[Git][security-tracker-team/security-tracker][master] 2 commits: Add runc to dla-needed.txt

) -- +libgoogle-gson-java + NOTE: 20220905: Programming language Java. +-- libraw NOTE: 20220904: Programming language: C++. -- @@ -94,6 +97,10 @@ qemu (Abhijith PA) NOTE: 20220808: conflicting pu at https://people.debian.org/~abhijith/upload/mruby/qemu_3.1+dfsg-8+deb10u9.dsc , needs

[Git][security-tracker-team/security-tracker][master] Reserve DLA-3098-1 for libmodbus

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: d024398f by Markus Koschany at 2022-09-04T23:51:06+02:00 Reserve DLA-3098-1 for libmodbus - - - - - 1 changed file: - data/DLA/list Changes: =

[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2022-2831,blender: Buster is not affected

+113,9 @@ sox (Abhijith PA) thunderbird NOTE: 20220904: Programming language: C++. -- +unzip + NOTE: 20220904: Programming language: C. +-- upx-ucl (Thorsten Alteholz) NOTE: 20220820: Programming language: C. NOTE: 20220820: CVE-2020-27787 may be not-affected. (Chris Lamb) @@ -121,6 +124,9

[Git][security-tracker-team/security-tracker][master] Resurrect thunderbird (some more opened CVEs)

: = data/dla-needed.txt = @@ -110,6 +110,9 @@ sox (Abhijith PA) NOTE: 20220818: Programming language: C. NOTE: 20220818: Requires some investigation; see #1012138 etc. -- +thunderbird + NOTE: 20220904: Programming language: C++. +-- upx-ucl (Thorsten

[Git][security-tracker-team/security-tracker][master] 2 commits: LTS: update bluez meta-data

Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker Commits: 7d13e03a by Anton Gladky at 2022-09-04T22:20:07+02:00 LTS: update bluez meta-data - - - - - 880b3fcc by Anton Gladky at 2022-09-04T22:47:23+02:00 Reserve DLA-3097-1 for thunderbird - - - - - 2

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e918bff8 by security tracker role at 2022-09-04T20:10:16+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] 9 commits: LTS: update curl meta-data

) -- connman - NOTE: 20220902: Programming language C. + NOTE: 20220902: Programming language: C. -- curl - NOTE: 20220901: Programming language C. + NOTE: 20220901: Programming language: C. + NOTE: 20220904: VCS: https://salsa.debian.org/lts-team/packages/curl.git + NOTE: 20220904: Special

[Git][security-tracker-team/security-tracker][master] Track pending linux fixes via bullseye-pu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1d077ae3 by Salvatore Bonaccorso at 2022-09-04T21:27:11+02:00 Track pending linux fixes via bullseye-pu - - - - - 1 changed file: - data/next-point-update.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add fixed version via unstable for CVE-2022-2735/pcs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f21447e4 by Salvatore Bonaccorso at 2022-09-04T20:57:24+02:00 Add fixed version via unstable for CVE-2022-2735/pcs - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Lower severity for CVE-2022-36640

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 39f78857 by Salvatore Bonaccorso at 2022-09-04T10:21:54+02:00 Lower severity for CVE-2022-36640 If InfluxDB is deployed on publicly accessible endpoint, it is recommended to enable

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: fd4165de by security tracker role at 2022-09-04T08:10:18+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2021-3508/pdfresurrect via unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f99f6961 by Salvatore Bonaccorso at 2022-09-04T08:54:14+02:00 Track fixed version for CVE-2021-3508/pdfresurrect via unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] dsa-needed: Prepared update for poppler for bullseye

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 45d8d559 by Salvatore Bonaccorso at 2022-09-04T08:52:11+02:00 dsa-needed: Prepared update for poppler for bullseye - - - - - 1 changed file: - data/dsa-needed.txt Changes: