Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
252b4ef2 by Moritz Muehlenhoff at 2023-09-26T21:34:07+02:00
bullseye/bookworm triage
- - - - -
2 changed files:
- data/CVE/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -514,16 +514,28 @@ CVE-2023-43477 (The ping_from parameter of
ping_tracerte.cgi in the web UI of Te
NOT-FOR-US: Telstra Smart Modem Gen 2 (Arcadyan LH1000) firmware
CVE-2023-43377 (A cross-site scripting (XSS) vulnerability in
/hoteldruid/visualizza_c ...)
- hoteldruid <unfixed> (bug #1052572)
+ [bookworm] - hoteldruid <no-dsa> (Minor issue)
+ [bullseye] - hoteldruid <no-dsa> (Minor issue)
CVE-2023-43376 (A cross-site scripting (XSS) vulnerability in
/hoteldruid/clienti.php ...)
- hoteldruid <unfixed> (bug #1052572)
+ [bookworm] - hoteldruid <no-dsa> (Minor issue)
+ [bullseye] - hoteldruid <no-dsa> (Minor issue)
CVE-2023-43375 (Hoteldruid v3.0.5 was discovered to contain multiple SQL
injection vul ...)
- hoteldruid <unfixed> (bug #1052572)
+ [bookworm] - hoteldruid <no-dsa> (Minor issue)
+ [bullseye] - hoteldruid <no-dsa> (Minor issue)
CVE-2023-43374 (Hoteldruid v3.0.5 was discovered to contain a SQL injection
vulnerabil ...)
- hoteldruid <unfixed> (bug #1052572)
+ [bookworm] - hoteldruid <no-dsa> (Minor issue)
+ [bullseye] - hoteldruid <no-dsa> (Minor issue)
CVE-2023-43373 (Hoteldruid v3.0.5 was discovered to contain a SQL injection
vulnerabil ...)
- hoteldruid <unfixed> (bug #1052572)
+ [bookworm] - hoteldruid <no-dsa> (Minor issue)
+ [bullseye] - hoteldruid <no-dsa> (Minor issue)
CVE-2023-43371 (Hoteldruid v3.0.5 was discovered to contain a SQL injection
vulnerabil ...)
- hoteldruid <unfixed> (bug #1052572)
+ [bookworm] - hoteldruid <no-dsa> (Minor issue)
+ [bullseye] - hoteldruid <no-dsa> (Minor issue)
CVE-2023-43207 (D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a
command ...)
NOT-FOR-US: D-Link
CVE-2023-43206 (D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a
command ...)
=====================================
data/dsa-needed.txt
=====================================
@@ -23,6 +23,8 @@ firefox-esr (jmm)
--
gpac/oldstable (jmm)
--
+jetty9
+--
libreswan (jmm)
Maintainer prepared bookworm-security update, but needs work on
bullseye-security backports
--
@@ -30,6 +32,8 @@ linux (carnil)
Wait until more issues have piled up, though try to regulary rebase for point
releases to more recent v5.10.y and 6.1.y versions
--
+mosquitto
+--
nbconvert/oldstable
Guilhem Moulin proposed an update ready for review
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/252b4ef2ee10a12cb552e54ce10713cf33f54113
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/252b4ef2ee10a12cb552e54ce10713cf33f54113
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
