[Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2023-36177/snapcast

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 93d617ea by Salvatore Bonaccorso at 2025-01-18T07:31:09+01:00 Track fixed version via unstable for CVE-2023-36177/snapcast - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Add snapcast to dla needed

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker Commits: 744a7297 by Bastien Roucariès at 2025-01-18T00:34:48+00:00 Add snapcast to dla needed - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-

[Git][security-tracker-team/security-tracker][master] Reserve DLA-4018-1 for ruby2.7

- NOTE: 20250117: Review done some cosmetic modification (rouca) --- shadow NOTE: 20250105: Added by Front-Desk (apo) NOTE: 20250105: shadow is a high-profile package. Upstream discussion for CVE-2024-56433 is View it on GitLab: https://salsa.debian.org/security-tracker-team/security

[Git][security-tracker-team/security-tracker][master] Reserve DLA-4015-2 for rsync

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker Commits: ac802edc by Thorsten Alteholz at 2025-01-18T00:12:24+01:00 Reserve DLA-4015-2 for rsync - - - - - 2 changed files: - data/DLA/list - data/dla-needed.txt Changes:

[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 7b570e17 by Salvatore Bonaccorso at 2025-01-18T00:07:55+01:00 Merge Linux CVEs from kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: = dat

[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 12ba8f4b by Salvatore Bonaccorso at 2025-01-18T00:05:06+01:00 Merge Linux CVEs from kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: = dat

[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0efcaf0e by Salvatore Bonaccorso at 2025-01-18T00:00:26+01:00 Merge Linux CVEs from kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: = dat

[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b6ec08c9 by Salvatore Bonaccorso at 2025-01-17T23:56:32+01:00 Merge Linux CVEs from kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: = dat

[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b45281bf by Salvatore Bonaccorso at 2025-01-17T23:53:58+01:00 Merge Linux CVEs from kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: = dat

[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 4db92765 by Salvatore Bonaccorso at 2025-01-17T23:51:14+01:00 Merge Linux CVEs from kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: = dat

[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 9fcff57c by Salvatore Bonaccorso at 2025-01-17T23:48:40+01:00 Merge Linux CVEs from kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: = dat

[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 8cead17f by Salvatore Bonaccorso at 2025-01-17T23:43:25+01:00 Merge Linux CVEs from kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: = dat

[Git][security-tracker-team/security-tracker][master] Re-associate CVE-2023-36177 with snapcast

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: b8e14aa3 by Salvatore Bonaccorso at 2025-01-17T23:41:20+01:00 Re-associate CVE-2023-36177 with snapcast Thanks: Felix Geyer - - - - - 1 changed file: - data/CVE/list Changes: ===

[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 66a9e8dd by Salvatore Bonaccorso at 2025-01-17T23:36:57+01:00 Merge Linux CVEs from kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: = dat

[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1a897f6c by Salvatore Bonaccorso at 2025-01-17T23:35:22+01:00 Merge Linux CVEs from kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: = dat

[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0c04c57b by Salvatore Bonaccorso at 2025-01-17T23:32:26+01:00 Merge Linux CVEs from kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: = dat

[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 09245897 by Salvatore Bonaccorso at 2025-01-17T23:24:53+01:00 Merge Linux CVEs from kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: = dat

[Git][security-tracker-team/security-tracker][master] Update Linux CVEs from kernel-sec

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: afc0e717 by Salvatore Bonaccorso at 2025-01-17T23:10:22+01:00 Update Linux CVEs from kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: = da

[Git][security-tracker-team/security-tracker][master] Add additional references for IP tunneling protocol issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1b953968 by Salvatore Bonaccorso at 2025-01-17T22:33:27+01:00 Add additional references for IP tunneling protocol issues - - - - - 1 changed file: - data/CVE/list Changes: ===

[Git][security-tracker-team/security-tracker][master] Add note about ruby

) NOTE: 20250112: Wait review https://lists.debian.org/debian-lts/2025/01/msg00011.html + NOTE: 20250117: Review done some cosmetic modification (rouca) -- shadow NOTE: 20250105: Added by Front-Desk (apo) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2024-55577/ratfor

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 0ceb4f73 by Salvatore Bonaccorso at 2025-01-17T22:00:05+01:00 Add Debian bug reference for CVE-2024-55577/ratfor - - - - - 1 changed file: - data/CVE/list Changes: ===

[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2024-11029/freeipa

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: ff14e642 by Salvatore Bonaccorso at 2025-01-17T21:57:49+01:00 Add Debian bug reference for CVE-2024-11029/freeipa - - - - - 1 changed file: - data/CVE/list Changes: ==

[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 18adcc3b by Salvatore Bonaccorso at 2025-01-17T21:48:02+01:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2024-4109

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 894d749a by Salvatore Bonaccorso at 2025-01-17T21:31:40+01:00 Remove notes from CVE-2024-4109 It was in the end found that it is just a bugfix but not a security issue. - - - - - 1 changed f

[Git][security-tracker-team/security-tracker][master] Remove some notes from rejected CVEs (duplicates of WordPress plugin issues)

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 24a4ce0e by Salvatore Bonaccorso at 2025-01-17T21:28:00+01:00 Remove some notes from rejected CVEs (duplicates of WordPress plugin issues) - - - - - 1 changed file: - data/CVE/list Changes

[Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2024-9673 (duplicate)

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 29475bac by Salvatore Bonaccorso at 2025-01-17T21:26:14+01:00 Remove notes from CVE-2024-9673 (duplicate) - - - - - 1 changed file: - data/CVE/list Changes: ==

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: a3ffdb1f by security tracker role at 2025-01-17T20:11:56+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] Add poco to dla-needed

-needed.txt = @@ -203,6 +203,9 @@ percona-toolkit pgagent NOTE: 20250117: Added by Front-Desk (rouca) -- +poco + NOTE: 20250117: Added by Front-Desk (rouca) +-- python-aiohttp (jspricke) NOTE: 20240523: Added by oldstable Security Team (jmm) NOTE

[Git][security-tracker-team/security-tracker][master] Add zfs-linux to dla-needed

/dla-needed.txt = @@ -313,3 +313,6 @@ unbound vim NOTE: 20250114: Added by Front-Desk (rouca) -- +zfs-linux + NOTE: 20250117: Added by Front-Desk (rouca) +-- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit

[Git][security-tracker-team/security-tracker][master] Add tiff to dla-needed following bookworm PU

: = data/dla-needed.txt = @@ -281,6 +281,11 @@ tcpdf (Adrian Bunk) NOTE: 20241205: Added by Front-Desk (santiago) NOTE: 20241230: https://lists.debian.org/debian-lts/2024/12/msg00057.html (bunk) -- +tiff + NOTE: 20250117: Added by Front-Desk (rouca

[Git][security-tracker-team/security-tracker][master] Update status for CVE-2024-759{5,6}

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: df328783 by Salvatore Bonaccorso at 2025-01-17T18:25:32+01:00 Update status for CVE-2024-759{5,6} - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] CVE-2024-45338/bullseye

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker Commits: e676353b by Bastien Roucariès at 2025-01-17T17:03:51+00:00 CVE-2024-45338/bullseye Dos thus minor - - - - - 1 changed file: - data/CVE/list Changes: = da

[Git][security-tracker-team/security-tracker][master] Add pgagent to dla-needed

-needed.txt = @@ -200,6 +200,9 @@ pam-u2f percona-toolkit NOTE: 20250105: Added by Front-Desk (apo) -- +pgagent + NOTE: 20250117: Added by Front-Desk (rouca) +-- python-aiohttp (jspricke) NOTE: 20240523: Added by oldstable Security Team (jmm) NOTE

[Git][security-tracker-team/security-tracker][master] Add additional references for protocol issues

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 6e894725 by Salvatore Bonaccorso at 2025-01-17T17:32:30+01:00 Add additional references for protocol issues - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] Add paper reference for protocol issues in GRE, GRE6, 4in6, 6in4 and GUE

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 1a336a6f by Salvatore Bonaccorso at 2025-01-17T17:24:49+01:00 Add paper reference for protocol issues in GRE, GRE6, 4in6, 6in4 and GUE - - - - - 1 changed file: - data/CVE/list Changes: =

[Git][security-tracker-team/security-tracker][master] Revert "Add network to dla-needed"

needed.txt = @@ -181,9 +181,6 @@ mosquitto nagvis NOTE: 20250117: Added by Front-Desk (rouca) -- -network-manager - NOTE: 20250117: Added by Front-Desk (rouca) --- nvidia-cuda-toolkit NOTE: 20241004: Added by Front-Desk (Beuc) -- View it on GitLab: https://salsa.debian.org/security-tr

[Git][security-tracker-team/security-tracker][master] Reserve DSA-5845-1 for tomcat10

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker Commits: 343d4e83 by Markus Koschany at 2025-01-17T17:08:20+01:00 Reserve DSA-5845-1 for tomcat10 - - - - - 2 changed files: - data/CVE/list - data/DSA/list Changes: ===

[Git][security-tracker-team/security-tracker][master] Add network to dla-needed

-needed.txt = @@ -181,6 +181,9 @@ mosquitto nagvis NOTE: 20250117: Added by Front-Desk (rouca) -- +network-manager + NOTE: 20250117: Added by Front-Desk (rouca) +-- nvidia-cuda-toolkit NOTE: 20241004: Added by Front-Desk (Beuc) -- View it on GitLab

[Git][security-tracker-team/security-tracker][master] Add nagvis to dla-needed

-needed.txt = @@ -178,6 +178,9 @@ mosquitto NOTE: 20241126: Backported https://people.debian.org/~abhijith/upload/gss/CVE-2024-3935.patch (abhijith) NOTE: 20241217: Backporting CVE-2024-8376 (abhijith) -- +nagvis + NOTE: 20250117: Added by Front-Desk (rouca

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: c05a54ab by Moritz Muehlenhoff at 2025-01-17T16:56:26+01:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list =

[Git][security-tracker-team/security-tracker][master] Add libnet-easytcp-perl to dla-needed

: = data/dla-needed.txt = @@ -152,6 +152,9 @@ jinja2 (Adrian Bunk) knot-resolver NOTE: 20240924: Added by Front-Desk (lamby) -- +libnet-easytcp-perl + NOTE: 20250117: Added by Front-Desk (rouca) +-- libreoffice (rouca) NOTE: 20250113: Added by Front-Desk

[Git][security-tracker-team/security-tracker][master] Bullseye grpc not affected

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker Commits: dfd92ea3 by Bastien Roucariès at 2025-01-17T15:50:59+00:00 Bullseye grpc not affected - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list =

[Git][security-tracker-team/security-tracker][master] sympa fixed in sid

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: e656229d by Moritz Muehlenhoff at 2025-01-17T16:38:00+01:00 sympa fixed in sid - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list ===

[Git][security-tracker-team/security-tracker][master] two NM issues

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 3ee97799 by Moritz Muehlenhoff at 2025-01-17T16:33:25+01:00 two NM issues - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list

[Git][security-tracker-team/security-tracker][master] fix description for CVE-2020-10136

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 04333782 by Moritz Muehlenhoff at 2025-01-17T16:06:31+01:00 fix description for CVE-2020-10136 - - - - - 1 changed file: - data/CVE/list Changes: = data/

[Git][security-tracker-team/security-tracker][master] Add djoser to dla-needed

-needed.txt = @@ -71,6 +71,9 @@ dcmtk (Adrian Bunk) NOTE: 20250117: Added by Front-Desk (rouca) NOTE: 20250117: Multiple CVEs have been piling up (rouca/front-desk) -- +djoser + NOTE: 20250117: Added by Front-Desk (rouca) +-- edk2 NOTE: 20240815: Added

[Git][security-tracker-team/security-tracker][master] dla: take dcmtk

= @@ -67,7 +67,7 @@ ckeditor3 NOTE: 20241002: rouca to check EOL'd ckeditor3 -> ckeditor[v4] upgrade path NOTE: 20241002: https://lists.debian.org/debian-lts/2024/10/msg3.html -- -dcmtk +dcmtk (Adrian Bunk) NOTE: 20250117: Added by Front-Desk (rouca)

[Git][security-tracker-team/security-tracker][master] mark libtar as removed from sid

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: c624c873 by Moritz Muehlenhoff at 2025-01-17T14:17:05+01:00 mark libtar as removed from sid - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE

[Git][security-tracker-team/security-tracker][master] k8s n/a

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 3436e7d4 by Moritz Muehlenhoff at 2025-01-17T13:29:34+01:00 k8s n/a - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list ==

[Git][security-tracker-team/security-tracker][master] Take libreoffice

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker Commits: 14c2fa6d by Bastien Roucariès at 2025-01-17T12:01:04+00:00 Take libreoffice - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt

[Git][security-tracker-team/security-tracker][master] Add dmctk to dla needed

-needed.txt = @@ -67,6 +67,10 @@ ckeditor3 NOTE: 20241002: rouca to check EOL'd ckeditor3 -> ckeditor[v4] upgrade path NOTE: 20241002: https://lists.debian.org/debian-lts/2024/10/msg3.html -- +dcmtk + NOTE: 20250117: Added by Front-Desk (rouca)

[Git][security-tracker-team/security-tracker][master] Add git-lfs to dla-needed

-needed.txt = @@ -113,6 +113,9 @@ frr (arturo) git (Sean Whitton) NOTE: 20250114: Added due to being an embargoed issue -- +git-lfs + NOTE: 20250117: Added by Front-Desk (rouca) +-- glewlwyd (Thorsten Alteholz) NOTE: 20240815: Added by Front-Desk (Beuc

[Git][security-tracker-team/security-tracker][master] Add pagure to dla-needed

-needed.txt = @@ -175,6 +175,9 @@ openafs (Abhijith PA) openjpeg2 (Markus Koschany) NOTE: 20250105: Added by Front-Desk (apo) -- +pagure + NOTE: 20250117: Added by Front-Desk (rouca) +-- pam-u2f NOTE: 20250117: Added by Front-Desk (rouca) -- View it on

[Git][security-tracker-team/security-tracker][master] Triage golang for bullseye

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker Commits: b90fb05c by Bastien Roucariès at 2025-01-17T10:57:17+00:00 Triage golang for bullseye - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list =

[Git][security-tracker-team/security-tracker][master] Triage bullseye virtuoso opensource

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker Commits: d9253702 by Bastien Roucariès at 2025-01-17T10:46:24+00:00 Triage bullseye virtuoso opensource - - - - - 1 changed file: - data/CVE/list Changes: = data/C

[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim python-django.

to run test suite. (dleidert) -- +python-django (Chris Lamb) + NOTE: 20250117: Added by Front-Desk (lamby) +-- qemu NOTE: 20240815: Added by Front-Desk (Beuc) NOTE: 20240815: Follow fixes from bookworm 12.4 (CVE-2023-5088) View it on GitLab: https://salsa.debian.org/security-tracker

[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 0e479413 by Moritz Muehlenhoff at 2025-01-17T11:09:00+01:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list =

[Git][security-tracker-team/security-tracker][master] Remove notes from rejected CVE from Linux CNA

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 74a4eeac by Salvatore Bonaccorso at 2025-01-17T10:52:49+01:00 Remove notes from rejected CVE from Linux CNA - - - - - 1 changed file: - data/CVE/list Changes:

[Git][security-tracker-team/security-tracker][master] bookworm triage

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker Commits: 2ec0464b by Moritz Muehlenhoff at 2025-01-17T09:21:21+01:00 bookworm triage - - - - - 2 changed files: - data/CVE/list - data/dsa-needed.txt Changes: = d

[Git][security-tracker-team/security-tracker][master] Add pam-u2f to dla-needed

-needed.txt = @@ -175,6 +175,9 @@ openafs (Abhijith PA) openjpeg2 (Markus Koschany) NOTE: 20250105: Added by Front-Desk (apo) -- +pam-u2f + NOTE: 20250117: Added by Front-Desk (rouca) +-- percona-toolkit NOTE: 20250105: Added by Front-Desk (apo

[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker Commits: 2d24727c by security tracker role at 2025-01-17T08:11:49+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: = data/CVE/list