Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits: 95731b3f by Moritz Muehlenhoff at 2023-09-07T12:11:29+02:00 bullseye/bookworm triage - - - - - 2 changed files: - data/CVE/list - data/dsa-needed.txt Changes: ===================================== data/CVE/list ===================================== @@ -436,6 +436,8 @@ CVE-2023-4587 (An IDOR vulnerability has been found in ZKTeco ZEM800 product aff NOT-FOR-US: ZKTeco ZEM800 product CVE-2023-4540 (Improper Handling of Exceptional Conditions vulnerability in Daurnimat ...) - lua-http <unfixed> + [bookworm] - lua-http <no-dsa> (Minor issue) + [bullseye] - lua-http <no-dsa> (Minor issue) NOTE: Fixed by: https://github.com/daurnimator/lua-http/commit/ddab2835c583d45dec62680ca8d3cbde55e0bae6 CVE-2023-4298 (The 123.chat WordPress plugin before 1.3.1 does not sanitise and escap ...) NOT-FOR-US: WordPress plugin @@ -705,9 +707,10 @@ CVE-2023-32806 (In wlan driver, there is a possible out of bounds write due to i CVE-2023-32805 (In power, there is a possible out of bounds write due to an insecure d ...) NOT-FOR-US: MediaTek CVE-2023-4751 (Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1 ...) - - vim <unfixed> + - vim <unfixed> (unimportant) NOTE: https://github.com/vim/vim/commit/e1121b139480f53d1b06f84f3e4574048108fa0b (v9.0.1331) NOTE: https://huntr.dev/bounties/db7be8d6-6cb7-4ae5-9c4e-805423afa378 + NOTE: Crash in CLI tool, no security impact CVE-2023-4740 (A vulnerability, which was classified as critical, was found in IBOS O ...) NOT-FOR-US: IBOS OA CVE-2023-4739 (A vulnerability, which was classified as critical, has been found in B ...) @@ -1413,6 +1416,8 @@ CVE-2023-39678 (A cross-site scripting (XSS) vulnerability in the device web int NOT-FOR-US: BDCOM OLT P3310D-2AC CVE-2023-39663 (Mathjax up to v2.7.9 was discovered to contain two Regular expression ...) - mathjax <unfixed> + [bookworm] - mathjax <no-dsa> (Minor issue) + [bullseye] - mathjax <no-dsa> (Minor issue) NOTE: https://github.com/mathjax/MathJax/issues/3074 CVE-2023-39616 (AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read mem ...) [experimental] - aom 3.7.0-1~exp1 ===================================== data/dsa-needed.txt ===================================== @@ -38,6 +38,8 @@ nodejs -- nova/oldstable -- +open-vm-tools (jmm) +-- openjdk-17/oldstable (jmm) -- php-cas/oldstable View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/95731b3fce160a20d0d1d246a2e985aa76671f84 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/95731b3fce160a20d0d1d246a2e985aa76671f84 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits