Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker
Commits: a0ebe7d7 by Sylvain Beucler at 2024-01-26T21:03:47+01:00 CVE-2024-22725/orthanc: buster postponed - - - - - 34dafc5c by Sylvain Beucler at 2024-01-26T21:03:47+01:00 ela: update salt status - - - - - 2 changed files: - data/CVE/list - data/dla-needed.txt Changes: ===================================== data/CVE/list ===================================== @@ -284,6 +284,7 @@ CVE-2024-22725 (Orthanc versions before 1.12.2 are affected by a reflected cross - orthanc 1.12.2+dfsg-1 [bookworm] - orthanc <no-dsa> (Minor issue) [bullseye] - orthanc <no-dsa> (Minor issue) + [buster] - orthanc <postponed> (Minor issue, XSS) NOTE: https://orthanc.uclouvain.be/hg/orthanc/rev/505416b269a0 CVE-2024-22720 (Kanboard 1.2.34 is vulnerable to Html Injection in the group managemen ...) - kanboard <unfixed> ===================================== data/dla-needed.txt ===================================== @@ -250,6 +250,7 @@ salt NOTE: 20230928: will need python3-saltfactories >= 0.907 (that need python3-setuptools (>= 50.3.2), python3-setuptools-scm (>= 3.4) to be investigated) NOTE: 20230928: will need python3-attr (>= 19.1) may from buster-backport ? or vendored ? NOTE: 20230928: see https://lists.debian.org/debian-lts/2023/09/msg00033.html + NOTE: 20240126: santiago in the process of EOLing the package (Beuc/front-desk) -- samba NOTE: 20230918: Added by Front-Desk (apo) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/3c24a26cb9c7a9f0dd6b44ebedac5c57d7c3cf26...34dafc5c5e93096da4eeaf6a736269c46781a700 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/3c24a26cb9c7a9f0dd6b44ebedac5c57d7c3cf26...34dafc5c5e93096da4eeaf6a736269c46781a700 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits