[Git][security-tracker-team/security-tracker][master] CVE-2021-45845/freecad n/a in stretch

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 41eafdb9 by Emilio Pozuelo Monfort at 2022-02-21T13:48:59+01:00 CVE-2021-45845/freecad n/a in stretch - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: d011e76b by Salvatore Bonaccorso at 2022-02-21T09:28:18+01:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2021-0177 for INTEL-SA-00539

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6eaa3c68 by Salvatore Bonaccorso at 2022-02-21T09:29:17+01:00 Add CVE-2021-0177 for INTEL-SA-00539 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] LTS: add expat

Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker Commits: f10dc9f5 by Anton Gladky at 2022-02-21T10:29:13+01:00 LTS: add expat - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt

[Git][security-tracker-team/security-tracker][master] LTS: update status, take debian-archive-keyring

with Debian QA to write our own patches (Beuc) NOTE: 20220114: CVEs unrelated to apng2gif's (Beuc) + NOTE: 20220221: WIP (Anton) -- gpac (Roberto C. Sánchez) NOTE: 20211101: coordinating with secteam for s-p-u since stretch/buster versions match (roberto) @@ -79,6 +80,8 @@ tiff (Thorsten

[Git][security-tracker-team/security-tracker][master] LTS: remove empty line

= @@ -81,7 +81,6 @@ ujson (Anton) NOTE: 20220121: please reheck, at least the mentioned function is available in Stretch NOTE: 20220206: https://salsa.debian.org/lts-team/packages/ujson Investigating, whether affected or not (Anton) NOTE: 20220221: WIP

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-23645/swtpm

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 51dfb1f2 by Salvatore Bonaccorso at 2022-02-21T09:28:49+01:00 Add CVE-2022-23645/swtpm - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] lts: take expat and freecad

: = data/dla-needed.txt = @@ -27,7 +27,7 @@ debian-archive-keyring (Anton) NOTE: 20211018: Jonathan is prepping the branch; will work NOTE: 20211018: with him and upload and publish the DLA. (utkarsh) -- -expat +expat (Emilio) NOTE: 20220221: please wait

[Git][security-tracker-team/security-tracker][master] Update information for CVE-2021-3746/libtpms

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6c1a093d by Salvatore Bonaccorso at 2022-02-21T13:43:03+01:00 Update information for CVE-2021-3746/libtpms - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add note for libgit2

= @@ -51,6 +51,7 @@ libarchive (Thorsten Alteholz) -- libgit2 (Utkarsh) NOTE: 20220208: got clearance. will upload this week. (utkarsh) + NOTE: 20220221: had been severely ill the past week. shall get it done soon. (utkarsh) -- linux (Ben Hutchings

[Git][security-tracker-team/security-tracker][master] 2 commits: LTS: update notes

-needed.txt Changes: = data/dla-needed.txt = @@ -28,12 +28,16 @@ debian-archive-keyring (Anton) NOTE: 20211018: with him and upload and publish the DLA. (utkarsh) -- expat + NOTE: 20220221: please wait for DSA first. (Anton

[Git][security-tracker-team/security-tracker][master] Update information on CVE-2021-33622/singularity-container

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f177ac93 by Salvatore Bonaccorso at 2022-02-21T20:35:46+01:00 Update information on CVE-2021-33622/singularity-container - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update information for CVE-2022-2331{8,9}/pcf2bdf

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: bf6968a1 by Salvatore Bonaccorso at 2022-02-21T21:16:56+01:00 Update information for CVE-2022-2331{8,9}/pcf2bdf - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ce1a7f37 by security tracker role at 2022-02-21T20:10:25+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process several NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0d0a7aa7 by Salvatore Bonaccorso at 2022-02-21T21:18:59+01:00 Process several NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-0691/node-url-parse

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: fcfbc749 by Salvatore Bonaccorso at 2022-02-21T21:26:35+01:00 Add CVE-2022-0691/node-url-parse - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2022-0686/node-url-parse via unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 292c38f7 by Salvatore Bonaccorso at 2022-02-21T21:02:24+01:00 Track fixed version for CVE-2022-0686/node-url-parse via unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e88cc34e by Salvatore Bonaccorso at 2022-02-21T21:25:36+01:00 Process NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] buster/bullseye triage

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 9e4d9721 by Moritz Muehlenhoff at 2022-02-21T17:03:33+01:00 buster/bullseye triage - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Track upstream commit for CVE-2021-4115/policykit-1

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b1cd15d7 by Salvatore Bonaccorso at 2022-02-22T07:32:55+01:00 Track upstream commit for CVE-2021-4115/policykit-1 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity

changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -30,7 +30,7 @@ debian-archive-keyring (Anton) expat (Emilio) NOTE: 20220221: please wait for DSA first. (Anton) -- -firmware-nonfree (Markus Koschany

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-25636/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 85f56316 by Salvatore Bonaccorso at 2022-02-22T07:00:59+01:00 Add CVE-2022-25636/linux - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2022-25255/Qt

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6881901a by Salvatore Bonaccorso at 2022-02-22T07:22:57+01:00 Track fixed version for CVE-2022-25255/Qt - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Track two issues in geckodriver, itp'ed

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 33c283bb by Salvatore Bonaccorso at 2022-02-22T07:29:28+01:00 Track two issues in geckodriver, itped - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add three mruby issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1409af1d by Salvatore Bonaccorso at 2022-02-22T07:18:27+01:00 Add three mruby issues - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] CVE-2022-25375: Add oss-security reference

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8fc58264 by Salvatore Bonaccorso at 2022-02-22T07:36:03+01:00 CVE-2022-25375: Add oss-security reference - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9569315d by security tracker role at 2022-02-21T08:10:13+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] 3 commits: Process NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6684b48d by Salvatore Bonaccorso at 2022-02-21T09:11:43+01:00 Process NFUs - - - - - ccb91d28 by Salvatore Bonaccorso at 2022-02-21T09:11:45+01:00 Add CVE-2022-23647/node-prismjs - - - - -

[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2022-23647/node-prismjs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: eca742d6 by Salvatore Bonaccorso at 2022-02-21T09:13:38+01:00 Track fixed version for CVE-2022-23647/node-prismjs - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2022-25375/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 88101543 by Salvatore Bonaccorso at 2022-02-21T09:21:37+01:00 Add CVE-2022-25375/linux - - - - - 1 changed file: - data/CVE/list Changes: =