[Git][security-tracker-team/security-tracker][master] Update information for CVE-2024-23078/jgrapht

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e7d4de9a by Salvatore Bonaccorso at 2024-04-09T06:00:08+02:00 Update information for CVE-2024-23078/jgrapht - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Update information on CVE-2024-2308{5,6}/libapfloat-java

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 23846624 by Salvatore Bonaccorso at 2024-04-09T05:56:43+02:00 Update information on CVE-2024-2308{5,6}/libapfloat-java - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add CVE-2024-2746

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0863d697 by Salvatore Bonaccorso at 2024-04-08T22:52:00+02:00 Add CVE-2024-2746 - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2024-0968

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 50242c23 by Salvatore Bonaccorso at 2024-04-08T22:39:23+02:00 Remove notes from CVE-2024-0968 - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Process some NFUs

-3444 (A vulnerability was found in Wangshen SecGate 3600 up to 20240408. It ...) - TODO: check + NOT-FOR-US: Wangshen SecGate 3600 CVE-2024-3443 (A vulnerability classified as problematic was found in SourceCodester ...) NOT-FOR-US: SourceCodester Prison Management System

[Git][security-tracker-team/security-tracker][master] Process some NFUs

System ...) - TODO: check + NOT-FOR-US: SourceCodester Laundry Management System CVE-2024-3444 (A vulnerability was found in Wangshen SecGate 3600 up to 20240408. It ...) TODO: check CVE-2024-3443 (A vulnerability classified as problematic was found in SourceCodester

[Git][security-tracker-team/security-tracker][master] automatic update

: check +CVE-2024-3444 (A vulnerability was found in Wangshen SecGate 3600 up to 20240408. It ...) + TODO: check +CVE-2024-3443 (A vulnerability classified as problematic was found in SourceCodester ...) + TODO: check +CVE-2024-3442 (A vulnerability classified as critical has been

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2024-2511/openssl

growth with session handling in TLSv1.3] - - openssl + - openssl (bug #1068658) NOTE: https://www.openssl.org/news/secadv/20240408.txt NOTE: https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08 (openssl-3.2.y) NOTE: https

[Git][security-tracker-team/security-tracker][master] Track proposed update for cjson via bookworm-pu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ced491c8 by Salvatore Bonaccorso at 2024-04-08T21:07:18+02:00 Track proposed update for cjson via bookworm-pu - - - - - 1 changed file: - data/next-point-update.txt Changes:

[Git][security-tracker-team/security-tracker][master] Track proposed fixes for imlib2 via bullseye-pu

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: e3847bbb by Salvatore Bonaccorso at 2024-04-08T21:04:19+02:00 Track proposed fixes for imlib2 via bullseye-pu - - - - - 1 changed file: - data/next-oldstable-point-update.txt Changes:

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 3931b1ae by Salvatore Bonaccorso at 2024-04-08T20:53:18+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add new frr issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4ec36523 by Salvatore Bonaccorso at 2024-04-08T20:50:04+02:00 Add new frr issues - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add upstream commit references for CVE-2024-2511/openssl

/secadv/20240408.txt + NOTE: https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08 (openssl-3.2.y) + NOTE: https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce (openssl-3.1.y) + NOTE: https://github.com/openssl/openssl

[Git][security-tracker-team/security-tracker][master] LTS: dispatch FD slots for second half of 2024

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker Commits: 7a3dc8da by Roberto C. Sánchez at 2024-04-08T12:30:00-04:00 LTS: dispatch FD slots for second half of 2024 - - - - - 1 changed file: - org/lts-frontdesk.2024.txt Changes:

[Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity

-2023-51765) NOTE: 20240217: Patch extracted and being reviewed (rouca) @@ -307,7 +307,7 @@ xorg-server (Adrian Bunk) NOTE: 20240404: (may) affect xorg-server in LTS. (lamby) NOTE: 20240408: CVE fixes caused regression in unstable: https://bugs.debian.org/1068470 (bunk) -- -zabbix (utkarsh

[Git][security-tracker-team/security-tracker][master] Add CVE-2024-26811/linux

handling in TLSv1.3] - openssl NOTE: https://www.openssl.org/news/secadv/20240408.txt View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/daf56b171b74e1f0bcf106b2c4792cfdce799503 -- View it on GitLab: https://salsa.debian.org/security

[Git][security-tracker-team/security-tracker][master] Drop obsolete LTS package info from packages/

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker Commits: 856a542b by Sylvain Beucler at 2024-04-08T17:15:58+02:00 Drop obsolete LTS package info from packages/ Cf. https://lts-team.pages.debian.net/wiki/TestSuites.html for updated info. - - - - - 2

[Git][security-tracker-team/security-tracker][master] dla: add notes

= @@ -92,6 +92,8 @@ gtkwave (Adrian Bunk) NOTE: 20240116: For CVE-2023-32650 etc. (lamby) NOTE: 20240316: https://bugs.debian.org/1060407 (bunk) NOTE: 20240403: will be submitted for DLA review when the pending DSA is published (bunk) + NOTE: 20240408: gtkwave

[Git][security-tracker-team/security-tracker][master] new openssl issue

= @@ -1,3 +1,6 @@ +CVE-2024-2511 [openssl: Unbounded memory growth with session handling in TLSv1.3] + - openssl + NOTE: https://www.openssl.org/news/secadv/20240408.txt CVE-2024-3437 (A vulnerability was found in SourceCodester Prison Management System 1

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 1fe4375b by Moritz Muehlenhoff at 2024-04-08T14:49:28+02:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] qt6 n/a

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 47a1eb59 by Moritz Muehlenhoff at 2024-04-08T14:19:12+02:00 qt6 n/a - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] new LLVM issue

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 7e8d3965 by Moritz Muehlenhoff at 2024-04-08T11:47:27+02:00 new LLVM issue - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add two "new" libmojolicious-perl issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1382db04 by Salvatore Bonaccorso at 2024-04-08T10:50:02+02:00 Add two new libmojolicious-perl issues - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Process some more NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1b43b921 by Salvatore Bonaccorso at 2024-04-08T10:46:03+02:00 Process some more NFUs - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1f72ca01 by security tracker role at 2024-04-08T08:11:46+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 31fecd10 by Salvatore Bonaccorso at 2024-04-08T09:54:51+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1fec508e by Salvatore Bonaccorso at 2024-04-08T08:59:24+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8dbc9635 by Salvatore Bonaccorso at 2024-04-08T08:13:30+02:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list