[Git][security-tracker-team/security-tracker][master] Mark CVE-2023-33956 and CVE-2023-339{68,69,70} as no-dsa for bookworm

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 683b192d by Salvatore Bonaccorso at 2023-06-13T06:46:05+02:00 Mark CVE-2023-33956 and CVE-2023-339{68,69,70} as no-dsa for bookworm - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Marked CVE-2023-1055 (389-ds-base) as no-dsa for buster folloring decision for bullseye.

Ola Lundqvist pushed to branch master at Debian Security Tracker / security-tracker Commits: ba7b9288 by Ola Lundqvist at 2023-06-12T23:05:57+02:00 Marked CVE-2023-1055 (389-ds-base) as no-dsa for buster folloring decision for bullseye. - - - - - 1 changed file: - data/CVE/list

[Git][security-tracker-team/security-tracker][master] Added libusrsctp to the packages to fix for buster.

: = data/dla-needed.txt = @@ -89,6 +89,9 @@ libfastjson (Thorsten Alteholz) libreoffice (Abhijith PA) NOTE: 20230530: Added by Front-Desk (pochu) -- +libusrsctp + NOTE: 20230612: Added by Front-Desk (opal) +-- linux (Ben Hutchings) NOTE: 20230111

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-34246/ruby-doorkeeper

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 35df8652 by Salvatore Bonaccorso at 2023-06-12T22:32:14+02:00 Add CVE-2023-34246/ruby-doorkeeper - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-3192/froxlor

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7e6ea7da by Salvatore Bonaccorso at 2023-06-12T22:27:08+02:00 Add CVE-2023-3192/froxlor - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 601583a2 by Salvatore Bonaccorso at 2023-06-12T22:26:35+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-3159/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 33962e00 by Salvatore Bonaccorso at 2023-06-12T22:20:15+02:00 Add CVE-2023-3159/linux - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e10da981 by Salvatore Bonaccorso at 2023-06-12T22:14:12+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b14987f1 by security tracker role at 2023-06-12T20:12:10+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2022-46165/syncthing

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ac043dd7 by Salvatore Bonaccorso at 2023-06-12T21:58:18+02:00 Add Debian bug reference for CVE-2022-46165/syncthing - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-46165/syncthing

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 566603a6 by Salvatore Bonaccorso at 2023-06-12T21:33:19+02:00 Add CVE-2022-46165/syncthing - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Update information for CVE-2023-34104/node-webfont

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 661627bb by Salvatore Bonaccorso at 2023-06-12T21:00:40+02:00 Update information for CVE-2023-34104/node-webfont - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2023-2426,vim: Buster, not-affected

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 1bf72b36 by Markus Koschany at 2023-06-12T19:36:38+02:00 CVE-2023-2426,vim: Buster, not-affected The vulnerable code was introduced later - - - - - c57e728a by Markus Koschany at

[Git][security-tracker-team/security-tracker][master] dla: claim ffmpeg

= @@ -43,7 +43,7 @@ erlang (Markus Koschany) NOTE: 20221119: Added by Front-Desk (ta) NOTE: 20221119: at least CVE-2022-37026 needs to be fixed (original request has been for Stretch) -- -ffmpeg +ffmpeg (Sylvain Beucler) NOTE: 20230612: Added by jmm

RE: Higher ROI at The ProMat - MHI 2023

Hi I hope you are doing well. Have you had a chance to read my previous email ? Do you want me to get more informatation on the counts and costs? Best Regards, Cindy Jenkins From: Cindy Jenkins Sent: Friday, June 9, 2023 10:49 PM To:

[Git][security-tracker-team/security-tracker][master] Add webkit2gtk and wpewebkit to list of package to hide for bugreporting

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 57784e6c by Salvatore Bonaccorso at 2023-06-12T17:10:49+02:00 Add webkit2gtk and wpewebkit to list of package to hide for bugreporting - - - - - 1 changed file: -

[Git][security-tracker-team/security-tracker][master] dav1d fixed in sid

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 27bbc461 by Moritz Muehlenhoff at 2023-06-12T16:08:56+02:00 dav1d fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] lts: update notes

/dla-needed.txt = @@ -115,7 +115,8 @@ openimageio (gladk) -- openjdk-11 (Emilio) NOTE: 20230419: Added by Front-Desk (ola) - NOTE: 20230522: waiting for sid/bullseye update (pochu) + NOTE: 20230522: waiting for sid update (pochu) + NOTE: 20230612: sid updated

[Git][security-tracker-team/security-tracker][master] Reserve DLA-3452-1 for thunderbird

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 17d519dc by Emilio Pozuelo Monfort at 2023-06-12T11:37:03+02:00 Reserve DLA-3452-1 for thunderbird - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add ffmpeg to dla-needed

-needed.txt = @@ -43,6 +43,13 @@ erlang (Markus Koschany) NOTE: 20221119: Added by Front-Desk (ta) NOTE: 20221119: at least CVE-2022-37026 needs to be fixed (original request has been for Stretch) -- +ffmpeg + NOTE: 20230612: Added by jmm + NOTE

[Git][security-tracker-team/security-tracker][master] 334 gitlab CVEs fixed in sid

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 1bce75cd by Moritz Muehlenhoff at 2023-06-12T10:58:05+02:00 334 gitlab CVEs fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c8fd7863 by Salvatore Bonaccorso at 2023-06-12T10:15:51+02:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: bcb9fc47 by security tracker role at 2023-06-12T08:12:09+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Track fixed version for some linux CVEs with unstable upload

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a3b0ab39 by Salvatore Bonaccorso at 2023-06-12T08:47:29+02:00 Track fixed version for some linux CVEs with unstable upload - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Track upstream commit for CVE-2023-2156/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: c21cc66a by Salvatore Bonaccorso at 2023-06-12T08:32:49+02:00 Track upstream commit for CVE-2023-2156/linux - - - - - 1 changed file: - data/CVE/list Changes: