[Git][security-tracker-team/security-tracker][master] Add Debian bug references for cargo and rust-cargo

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 98f38267 by Salvatore Bonaccorso at 2023-08-12T23:17:50+02:00 Add Debian bug references for cargo and rust-cargo - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2023-3994{5,6,7}/fastdds

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 27f2cc83 by Salvatore Bonaccorso at 2023-08-12T22:19:19+02:00 Add Debian bug reference for CVE-2023-3994{5,6,7}/fastdds - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2020-24221 as NFU

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: cfe92ddc by Salvatore Bonaccorso at 2023-08-12T22:06:29+02:00 Add CVE-2020-24221 as NFU - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2023-40225/haproxy

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9936743a by Salvatore Bonaccorso at 2023-08-12T21:48:56+02:00 Add fixed version for CVE-2023-40225/haproxy - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-28429/ffmpeg

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1c567954 by Salvatore Bonaccorso at 2023-08-12T21:43:54+02:00 Add CVE-2021-28429/ffmpeg - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2020-36138/ffmpeg

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8cb5ead1 by Salvatore Bonaccorso at 2023-08-12T21:32:46+02:00 Add CVE-2020-36138/ffmpeg - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-25786/qpdf

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: efdf2319 by Salvatore Bonaccorso at 2023-08-12T21:24:00+02:00 Add CVE-2021-25786/qpdf - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-3236/vim

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0f0eeb63 by Salvatore Bonaccorso at 2023-08-12T21:03:29+02:00 Add CVE-2021-3236/vim - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] gst-plugins-ugly1.0 DSA

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: bb297016 by Moritz Mühlenhoff at 2023-08-12T21:00:06+02:00 gst-plugins-ugly1.0 DSA - - - - - 3 changed files: - data/CVE/list - data/DSA/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2020-28840/jhead

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3b7f58bf by Salvatore Bonaccorso at 2023-08-12T20:47:18+02:00 Add CVE-2020-28840/jhead - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8b940955 by Salvatore Bonaccorso at 2023-08-12T19:20:52+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] dla: take gst-plugins-ugly1.0

-needed.txt = @@ -72,7 +72,7 @@ glib2.0 (santiago) NOTE: 20230724: buster should be ready. need if it's possible to run same reporter's fuzz test NOTE: 20230807: idem. -- -gst-plugins-ugly1.0 +gst-plugins-ugly1.0 (Adrian Bunk) NOTE: 20230812: Added by Front-Desk

[Git][security-tracker-team/security-tracker][master] dla: mention contributors should self-assign the (experimental) issues when claiming

-plugins-ugly1.0 NOTE: 20230812: Added by Front-Desk (Beuc) - NOTE: 20230812: Experimental issue-based workflow: please follow https://salsa.debian.org/lts-team/lts-updates-tasks/-/issues/39 + NOTE: 20230812: Experimental issue-based workflow: please self-assign and follow https://salsa.debian.org

[Git][security-tracker-team/security-tracker][master] dla: add lxc

= @@ -98,6 +98,11 @@ libreoffice (rouca) linux (Ben Hutchings) NOTE: 20230111: perma-added for LTS package-specific delegation (bwh) -- +lxc + NOTE: 20230812: Added by Front-Desk (Beuc) + NOTE: 20230812: Experimental issue-based workflow: please follow https

[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2022-38223/w3m: reference follow-up fix

: Added by Front-Desk (Beuc) -- +w3m + NOTE: 20230812: Added by Front-Desk (Beuc) + NOTE: 20230812: Experimental issue-based workflow: please follow https://salsa.debian.org/lts-team/lts-updates-tasks/-/issues/42 + NOTE: 20230812: Follow fixes from bullseye 11.7 (1 CVE) (Beuc/front-desk) +-- zabbix

[Git][security-tracker-team/security-tracker][master] dla: add orthanc

= @@ -148,6 +148,11 @@ openjdk-11 (Emilio) openssl (gladk) NOTE: 20230731: Added by Front-Desk (apo) -- +orthanc + NOTE: 20230812: Added by Front-Desk (Beuc) + NOTE: 20230812: Experimental issue-based workflow: please follow https://salsa.debian.org/lts-team

[Git][security-tracker-team/security-tracker][master] 2 commits: dla: add gst-plugins-ugly1.0

@@ glib2.0 (santiago) NOTE: 20230724: buster should be ready. need if it's possible to run same reporter's fuzz test NOTE: 20230807: idem. -- +gst-plugins-ugly1.0 + NOTE: 20230812: Added by Front-Desk (Beuc) + NOTE: 20230812: Experimental issue-based workflow: please follow https

[Git][security-tracker-team/security-tracker][master] CVE-2023-3180/qemu: buster postponed

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker Commits: e901d995 by Sylvain Beucler at 2023-08-12T12:19:24+02:00 CVE-2023-3180/qemu: buster postponed - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] dla: add netatalk

: 20230812: Added by Front-Desk (Beuc) + NOTE: 20230812: Experimental issue-based workflow: please follow https://salsa.debian.org/lts-team/lts-updates-tasks/-/issues/38 + NOTE: 20230812: Regression update request: https://lists.debian.org/debian-lts/2023/08/msg00014.html (Beuc/front-desk) +-- nodejs

[Git][security-tracker-team/security-tracker][master] Process several NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 72098f8b by Salvatore Bonaccorso at 2023-08-12T10:26:05+02:00 Process several NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process two NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 313f413d by Salvatore Bonaccorso at 2023-08-12T10:14:41+02:00 Process two NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2cdf7222 by security tracker role at 2023-08-12T08:12:15+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2020-3602{3,4}/poppler

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3c2ec523 by Salvatore Bonaccorso at 2023-08-12T09:24:51+02:00 Add CVE-2020-3602{3,4}/poppler - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for gst-plugins-ugly1.0 issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5d4b150d by Salvatore Bonaccorso at 2023-08-12T08:04:24+02:00 Add Debian bug reference for gst-plugins-ugly1.0 issues - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2023-40225/haproxy

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9d5ba555 by Salvatore Bonaccorso at 2023-08-12T08:02:02+02:00 Add Debian bug reference for CVE-2023-40225/haproxy - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2023-40267/python-git

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 33f5f58a by Salvatore Bonaccorso at 2023-08-12T08:00:41+02:00 Add Debian bug reference for CVE-2023-40267/python-git - - - - - 1 changed file: - data/CVE/list Changes: