Markus Koschany pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
baa5071f by Markus Koschany at 2023-04-05T21:50:16+02:00
Reserve DSA-5381-1 for tomcat9
- - - - -
2 changed files:
- data/CVE/list
- data/DSA/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -31967,7 +31967,6 @@ CVE-2022-3933 (The Essential Real Estate WordPress
plugin before 3.9.6 does not
NOT-FOR-US: WordPress plugin
CVE-2022-45143 (The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to
9.0.68 and ...)
- tomcat9 9.0.70-1
- [bullseye] - tomcat9 <postponed> (Minor issue, fix along in future
update)
[buster] - tomcat9 <not-affected> (The vulnerable code was introduced
later)
- tomcat8 <removed>
NOTE:
https://github.com/apache/tomcat/commit/b336f4e58893ea35114f1e4a415657f723b1298e
(9.0.69)
@@ -42817,7 +42816,6 @@ CVE-2022-42253
RESERVED
CVE-2022-42252 (If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67,
10.0.0-M1 to 10. ...)
- tomcat9 9.0.68-1
- [bullseye] - tomcat9 <postponed> (Minor issue, fix along in future
update)
- tomcat8 <removed>
NOTE: https://lists.apache.org/thread/zzcxzvqfdqn515zfs3dxb7n8gty589sq
NOTE:
https://github.com/apache/tomcat/commit/4c7f4fd09d2cc1692112ef70b8ee23a7a037ae77
(9.0.68)
=====================================
data/DSA/list
=====================================
@@ -1,3 +1,6 @@
+[05 Apr 2023] DSA-5381-1 tomcat9 - security update
+ {CVE-2022-42252 CVE-2022-45143 CVE-2023-28708}
+ [bullseye] - tomcat9 9.0.43-2~deb11u6
[29 Mar 2023] DSA-5380-1 xorg-server - security update
{CVE-2023-1393}
[bullseye] - xorg-server 2:1.20.11-1+deb11u6
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/baa5071fa0ec69cb89324abe638a02ca28a68978
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/baa5071fa0ec69cb89324abe638a02ca28a68978
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
