Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
14c40fdc by Chris Lamb at 2025-03-24T16:50:02+00:00
CVE-2023-2603/libcap2 is vulnerable in bullseye; now pending update. Thanks, 
Salvatore and Marc Deslauriers.

- - - - -
bbf74175 by Chris Lamb at 2025-03-24T16:50:06+00:00
data/dla-needed.txt: Claim phpmyadmin.

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -161611,7 +161611,6 @@ CVE-2023-2671 (A vulnerability was found in 
SourceCodester Lost and Found Inform
        NOT-FOR-US: SourceCodester Lost and Found Information System
 CVE-2023-2603 (A vulnerability was found in libcap. This issue occurs in the 
_libcap_ ...)
        - libcap2 1:2.66-4 (bug #1036114)
-       [bullseye] - libcap2 <not-affected> (Vulnerable code introduced later)
        [buster] - libcap2 <not-affected> (Vulnerable code introduced later)
        NOTE: 
https://sites.google.com/site/fullycapable/release-notes-for-libcap#h.iuvg7sbjg8pe
        NOTE: 
https://www.x41-dsec.de/static/reports/X41-libcap-Code-Review-2023-OSTIF-Final-Report.pdf


=====================================
data/dla-needed.txt
=====================================
@@ -228,7 +228,7 @@ php-twig
   NOTE: 20250209: Added by Front-Desk (apo)
   NOTE: 20250209: Vulnerable code is in 
src/Node/Expression/NullCoalesceExpression.php (apo)
 --
-phpmyadmin
+phpmyadmin (Chris Lamb)
   NOTE: 20250209: Added by Front-Desk (apo)
   NOTE: 20250219: Packaged prepared on salsa. (lamby)
   NOTE: 20250306: Checking some postponed issues. (lamby)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/b1868c484de92a7705b8a10f28d553c591584d0a...bbf7417512699ae176fc7d437f9da1c9e8c4e12b

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/b1868c484de92a7705b8a10f28d553c591584d0a...bbf7417512699ae176fc7d437f9da1c9e8c4e12b
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to