Merge ~bruce-cable/ubuntu-cve-tracker:cve-status-updates into ubuntu-cve-tracker:master

[Bruce Cable]

Status updates for CVE-2022-22995 and CVE-2023-3164

[Alex Murray (alexmurray)]

LGTM (I was going to suggest that for noble and devel these should be marked as 'released' rather than 'not-affected' but then I see that the change to mark devel as not-affected was done by me as part of our https://wiki.ubuntu.com/SecurityTeam/ReleaseCycle#Infrastructure_.28devel.29 processes so then let's leave it as not-affected)

review: Approve

[Alex Murray (alexmurray)]

oh whoops, I didn't notice you explicitly tagged Evan for review - apologies, I just merged it!

[Evan Caville (evancaville)]

I approve alex's approval of this pr

review: Approve

diff --git a/active/CVE-2022-22995 b/active/CVE-2022-22995
index f21821c..2fc3849 100644
--- a/active/CVE-2022-22995
+++ b/active/CVE-2022-22995
@@ -16,24 +16,24 @@ Bugs:
  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1053545
 Priority: medium
 Discovered-by:
-Assigned-to:
+Assigned-to: bruce-cable
 CVSS:
  nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H [9.8 CRITICAL]
 
 Patches_netatalk:
 upstream_netatalk: released (3.1.18~ds-1)
 trusty_netatalk: ignored (end of standard support)
-trusty/esm_netatalk: needs-triage
+trusty/esm_netatalk: not-affected (code not present)
 xenial_netatalk: ignored (end of standard support)
-esm-apps/xenial_netatalk: needs-triage
+esm-apps/xenial_netatalk: not-affected (code not present)
 bionic_netatalk: ignored (end of standard support)
-esm-apps/bionic_netatalk: needs-triage
-focal_netatalk: needs-triage
-esm-apps/focal_netatalk: needs-triage
-jammy_netatalk: needs-triage
-esm-apps/jammy_netatalk: needs-triage
+esm-apps/bionic_netatalk: not-affected (code not present)
+focal_netatalk: needed
+esm-apps/focal_netatalk: needed
+jammy_netatalk: needed
+esm-apps/jammy_netatalk: needed
 lunar_netatalk: ignored (end of life, was needs-triage)
-mantic_netatalk: needs-triage
-noble_netatalk: needs-triage
-esm-apps/noble_netatalk: needs-triage
+mantic_netatalk: needed
+noble_netatalk: not-affected (3.1.18~ds-1build4)
+esm-apps/noble_netatalk: not-affected (3.1.18~ds-1build4)
 devel_netatalk: not-affected (3.1.18~ds-1build4)
diff --git a/active/CVE-2023-3164 b/active/CVE-2023-3164
index c98a0fe..d77fa2c 100644
--- a/active/CVE-2023-3164
+++ b/active/CVE-2023-3164
@@ -26,15 +26,15 @@ CVSS:
 Patches_tiff:
 upstream_tiff: needs-triage
 trusty_tiff: ignored (end of standard support)
-trusty/esm_tiff: deferred
+trusty/esm_tiff: needed
 xenial_tiff: ignored (end of standard support)
-esm-infra/xenial_tiff: deferred
+esm-infra/xenial_tiff: needed
 bionic_tiff: ignored (end of standard support)
-esm-infra/bionic_tiff: deferred
-focal_tiff: deferred
-jammy_tiff: deferred
+esm-infra/bionic_tiff: needed
+focal_tiff: needed
+jammy_tiff: needed
 kinetic_tiff: ignored (end of life, was needs-triage)
 lunar_tiff: ignored (end of life, was deferred)
-mantic_tiff: deferred
-noble_tiff: deferred
+mantic_tiff: needed
+noble_tiff: needed
 devel_tiff: deferred