[Git][security-tracker-team/security-tracker][master] Claim bind9 in dla-needed.txt. Thanks to Ola for preparing the patch

Santiago R.R. pushed to branch master at Debian Security Tracker / security-tracker Commits: e7dd54c9 by Santiago Ruano Rincón at 2024-04-22T20:47:42-03:00 Claim bind9 in dla-needed.txt. Thanks to Ola for preparing the patch - - - - - 1 changed file: - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 31bf8786 by Moritz Muehlenhoff at 2024-04-22T23:27:47+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e395f3b2 by security tracker role at 2024-04-22T20:12:15+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] bookworm/bullseye triage

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: ef30adf5 by Moritz Muehlenhoff at 2024-04-22T18:51:58+02:00 bookworm/bullseye triage - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] LTS: reclaim nodejs and mediawiki in dla-needed.txt

Guilhem Moulin pushed to branch master at Debian Security Tracker / security-tracker Commits: d328d634 by Guilhem Moulin at 2024-04-22T18:02:37+02:00 LTS: reclaim nodejs and mediawiki in dla-needed.txt - - - - - 1 changed file: - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] dla: retake

Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker Commits: abd5dfea by Adrian Bunk at 2024-04-22T18:49:43+03:00 dla: retake - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt

[Git][security-tracker-team/security-tracker][master] bugnums

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 8b3748e5 by Moritz Muehlenhoff at 2024-04-22T16:49:52+02:00 bugnums - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] openjdk-17 DSA

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 10e00d82 by Moritz Mühlenhoff at 2024-04-22T16:11:35+02:00 openjdk-17 DSA - - - - - 2 changed files: - data/DSA/list - data/dsa-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: 95e3d866 by Roberto C. Sánchez at 2024-04-22T10:01:40-04:00 semi-automatic unclaim after 2 weeks of inactivity Signed-off-by: Roberto C. Sánchez robe...@connexer.com - - - - - 1 changed file:

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: a7a1fda4 by Moritz Muehlenhoff at 2024-04-22T15:51:46+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Reserve DLA-3793-1 for openjdk-11

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 9432f13e by Emilio Pozuelo Monfort at 2024-04-22T15:40:27+02:00 Reserve DLA-3793-1 for openjdk-11 - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] two ffmpeg upstream fixes

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 7b37837d by Moritz Muehlenhoff at 2024-04-22T15:19:16+02:00 two ffmpeg upstream fixes - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] new ffmpeg issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: ad372d31 by Moritz Muehlenhoff at 2024-04-22T15:10:49+02:00 new ffmpeg issues - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] no bugs needed for ffmpeg, usually they all end up in managed releases

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: c24d6aef by Moritz Muehlenhoff at 2024-04-22T14:54:44+02:00 no bugs needed for ffmpeg, usually they all end up in managed releases - - - - - 1 changed file: -

[Git][security-tracker-team/security-tracker][master] new ffmpeg issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 9e3399c9 by Moritz Muehlenhoff at 2024-04-22T14:48:58+02:00 new ffmpeg issues - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Reserve DLA-3792-1 for samba

Santiago R.R. pushed to branch master at Debian Security Tracker / security-tracker Commits: 9c3b37c9 by Santiago Ruano Rincón at 2024-04-22T09:06:25-03:00 Reserve DLA-3792-1 for samba - - - - - 3 changed files: - data/CVE/list - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] new rustls issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 97b773b8 by Moritz Muehlenhoff at 2024-04-22T14:04:08+02:00 new rustls issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] LTS: add progress update for src:emacs

: 20240422: Making progress through bookworm,bullseye,buster. + NOTE: 20240422: No major blockers, just taking some backporting. (spwhitton) -- freeimage NOTE: 20240320: Added by Front-Desk (ta) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit

[Git][security-tracker-team/security-tracker][master] new pytorch issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: f700cc5a by Moritz Muehlenhoff at 2024-04-22T13:35:07+02:00 new pytorch issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 868ccb12 by Moritz Muehlenhoff at 2024-04-22T12:48:59+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim astropy.

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker Commits: 8b19ac59 by Chris Lamb at 2024-04-22T10:22:58+01:00 data/dla-needed.txt: Claim astropy. - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] LTS: claim h2o in dla-needed.txt

Daniel Leidert pushed to branch master at Debian Security Tracker / security-tracker Commits: 29e4090e by Daniel Leidert at 2024-04-22T11:14:46+02:00 LTS: claim h2o in dla-needed.txt - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] LTS: claim runc in dla-needed.txt

Daniel Leidert pushed to branch master at Debian Security Tracker / security-tracker Commits: 6d218e0c by Daniel Leidert at 2024-04-22T10:49:10+02:00 LTS: claim runc in dla-needed.txt - - - - - 1 changed file: - data/dla-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] bullseye/bookworm triage

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: cb445d82 by Moritz Muehlenhoff at 2024-04-22T11:02:14+02:00 bullseye/bookworm triage - - - - - 2 changed files: - data/CVE/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Reserve DLA-3791-1 for thunderbird

= data/dla-needed.txt = @@ -312,9 +312,6 @@ suricata (Adrian Bunk) NOTE: 20231016: Still reviewing+testing CVEs. (bunk) NOTE: 20231120: DLA coming soon. (bunk) -- -thunderbird (Emilio) - NOTE: 20240422: Added by pochu --- tiff (Thorsten Alteholz) NOTE

[Git][security-tracker-team/security-tracker][master] lts: take thunderbird

: = data/dla-needed.txt = @@ -312,6 +312,9 @@ suricata (Adrian Bunk) NOTE: 20231016: Still reviewing+testing CVEs. (bunk) NOTE: 20231120: DLA coming soon. (bunk) -- +thunderbird (Emilio) + NOTE: 20240422: Added by pochu +-- tiff (Thorsten Alteholz) NOTE

[Git][security-tracker-team/security-tracker][master] Add CVE-2024-20380/clamav

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 42896847 by Salvatore Bonaccorso at 2024-04-22T10:28:39+02:00 Add CVE-2024-20380/clamav - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] openjdk-11 DSA

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: e81da1de by Moritz Mühlenhoff at 2024-04-22T10:26:25+02:00 openjdk-11 DSA - - - - - 2 changed files: - data/DSA/list - data/dsa-needed.txt Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1c0c2d76 by Salvatore Bonaccorso at 2024-04-22T10:22:56+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d9f5714f by security tracker role at 2024-04-22T08:11:53+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2024-32473/docker.io

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 53940647 by Salvatore Bonaccorso at 2024-04-22T09:48:26+02:00 Add CVE-2024-32473/docker.io - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add upstream tag information for dwarfutils issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2bf91b9e by Salvatore Bonaccorso at 2024-04-22T09:45:24+02:00 Add upstream tag information for dwarfutils issues - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add information for CVE-2024-31745/dwarfutils

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 5e712110 by Salvatore Bonaccorso at 2024-04-22T09:41:20+02:00 Add information for CVE-2024-31745/dwarfutils But it looks it is a duplicate assignment from MITRE CNA for an dwarfutils issue

[Git][security-tracker-team/security-tracker][master] Mark CVE-2024-3463 as NFU

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f0ec497b by Salvatore Bonaccorso at 2024-04-22T09:36:43+02:00 Mark CVE-2024-3463 as NFU - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] CVE-2023-50186/gst-plugins-bad1.0 assigned

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d3e0c37b by Salvatore Bonaccorso at 2024-04-22T09:32:52+02:00 CVE-2023-50186/gst-plugins-bad1.0 assigned - - - - - 2 changed files: - data/CVE/list - data/DSA/list Changes:

[Git][security-tracker-team/security-tracker][master] fix CVE list

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 803a517e by Moritz Mühlenhoff at 2024-04-22T09:30:01+02:00 fix CVE list - - - - - 1 changed file: - data/DSA/list Changes: = data/DSA/list

[Git][security-tracker-team/security-tracker][master] guix/thunderbird DSAs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: f7e52b3b by Moritz Mühlenhoff at 2024-04-22T09:14:16+02:00 guix/thunderbird DSAs - - - - - 3 changed files: - data/CVE/list - data/DSA/list - data/dsa-needed.txt Changes: