[Git][security-tracker-team/security-tracker][master] Reserve DLA-3662-1 for freeimage

Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker Commits: 22ea11b5 by Anton Gladky at 2023-11-24T06:51:27+01:00 Reserve DLA-3662-1 for freeimage - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Update notes for outstanding freeimage issues

Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker Commits: 8e1308ad by Anton Gladky at 2023-11-24T06:15:04+01:00 Update notes for outstanding freeimage issues - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Update status for CVE-2022-48570/libcrypto++

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7a8b9c09 by Salvatore Bonaccorso at 2023-11-23T23:43:02+01:00 Update status for CVE-2022-48570/libcrypto++ >From a comment from upstream: To fix the underlying issue a rewrite of the Integer

[Git][security-tracker-team/security-tracker][master] Reserve DLA-3661-1 for firefox-esr

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 9b473de5 by Emilio Pozuelo Monfort at 2023-11-23T23:35:26+01:00 Reserve DLA-3661-1 for firefox-esr - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2023-48230

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3937d25f by Salvatore Bonaccorso at 2023-11-23T23:03:25+01:00 Add Debian bug reference for CVE-2023-48230 - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Marked CVE-2023-49208 as not affected for buster.

Ola Lundqvist pushed to branch master at Debian Security Tracker / security-tracker Commits: f4a918a4 by Ola Lundqvist at 2023-11-23T21:50:05+00:00 Marked CVE-2023-49208 as not affected for buster. - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Added tinymce to dla-needed.

-needed.txt = @@ -264,6 +264,9 @@ symfony (Markus Koschany) thunderbird (Emilio) NOTE: 20231122: Added by Front-Desk (ola) -- +tinymce + NOTE: 20231123: Added by Front-Desk (ola) +-- tor NOTE: 20231119: Added by Front-Desk (apo) -- View it on GitLab

[Git][security-tracker-team/security-tracker][master] Marked CVE-2023-40030 as no-dsa for buster following bullseye.

Ola Lundqvist pushed to branch master at Debian Security Tracker / security-tracker Commits: ffc07270 by Ola Lundqvist at 2023-11-23T21:41:14+00:00 Marked CVE-2023-40030 as no-dsa for buster following bullseye. - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Marked CVE-2023-20246 as not affected for buster.

Ola Lundqvist pushed to branch master at Debian Security Tracker / security-tracker Commits: 6e7dc086 by Ola Lundqvist at 2023-11-23T21:29:24+00:00 Marked CVE-2023-20246 as not affected for buster. It should be marked as not affected for all versions since the vulnerability is only in

[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2023-6212/thunderbird via unstable

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: f5484dc1 by Salvatore Bonaccorso at 2023-11-23T22:09:11+01:00 Track fixed version for CVE-2023-6212/thunderbird via unstable - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Fix typo in source package name for thunderbird

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0da0f8a4 by Salvatore Bonaccorso at 2023-11-23T22:07:21+01:00 Fix typo in source package name for thunderbird - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 70356eb7 by Salvatore Bonaccorso at 2023-11-23T22:02:32+01:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-49208/glewlwyd

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 62ec7603 by Salvatore Bonaccorso at 2023-11-23T21:46:27+01:00 Add CVE-2023-49208/glewlwyd - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-33202/bouncycastle

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: abe352cd by Salvatore Bonaccorso at 2023-11-23T21:44:58+01:00 Add CVE-2023-33202/bouncycastle - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-5972/linux

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b01852e8 by Salvatore Bonaccorso at 2023-11-23T21:34:02+01:00 Add CVE-2023-5972/linux - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a0ac1c94 by Salvatore Bonaccorso at 2023-11-23T21:28:24+01:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8213b5fe by security tracker role at 2023-11-23T20:11:37+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Reserve DSA number for intel-microcode update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ab0e66e6 by Salvatore Bonaccorso at 2023-11-23T16:36:01+01:00 Reserve DSA number for intel-microcode update - - - - - 2 changed files: - data/DSA/list - data/dsa-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] thunderbird fixed in sid

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: cd527a01 by Moritz Muehlenhoff at 2023-11-23T15:35:14+01:00 thunderbird fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] NFU

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 46935e67 by Moritz Muehlenhoff at 2023-11-23T13:58:01+01:00 NFU - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] record upstream fix for libcrypto++

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 98c8f5dc by Moritz Muehlenhoff at 2023-11-23T12:53:00+01:00 record upstream fix for libcrypto++ - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] new cargo issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 384a7bb4 by Moritz Muehlenhoff at 2023-11-23T12:04:37+01:00 new cargo issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] ckeditor non issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: d718f171 by Moritz Muehlenhoff at 2023-11-23T12:00:17+01:00 ckeditor non issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 5a13f24c by Moritz Muehlenhoff at 2023-11-23T11:14:34+01:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] lts: take firefox-esr and thunderbird

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker Commits: 97415239 by Emilio Pozuelo Monfort at 2023-11-23T10:36:59+01:00 lts: take firefox-esr and thunderbird - - - - - 1 changed file: - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6803feda by Salvatore Bonaccorso at 2023-11-23T09:37:26+01:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add CVE-2023-48107/zlib-ng

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 197e5223 by Salvatore Bonaccorso at 2023-11-23T09:35:54+01:00 Add CVE-2023-48107/zlib-ng - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7338ce99 by security tracker role at 2023-11-23T08:12:01+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list