Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4c023ff2 by Moritz Muehlenhoff at 2023-01-23T11:18:33+01:00
bullseye triage
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -632,32 +632,39 @@ CVE-2022-48280
RESERVED
CVE-2023-XXXX [wnpa-sec-2023-07: TIPC dissector crash]
- wireshark 4.0.3-1
+ [bullseye] - wireshark <postponed> (Minor issue, fix along in future
update)
NOTE: https://www.wireshark.org/security/wnpa-sec-2023-07.html
NOTE: https://gitlab.com/wireshark/wireshark/-/issues/18770
CVE-2023-XXXX [wnpa-sec-2023-06: Multiple dissector excessive loops]
- wireshark 4.0.3-1
+ [bullseye] - wireshark <postponed> (Minor issue, fix along in future
update)
NOTE: https://www.wireshark.org/security/wnpa-sec-2023-06.html
NOTE: https://gitlab.com/wireshark/wireshark/-/issues/18711
NOTE: https://gitlab.com/wireshark/wireshark/-/issues/18720
NOTE: https://gitlab.com/wireshark/wireshark/-/issues/18737
CVE-2023-XXXX [wnpa-sec-2023-05: iSCSI dissector crash]
- wireshark 4.0.3-1
+ [bullseye] - wireshark <postponed> (Minor issue, fix along in future
update)
NOTE: https://www.wireshark.org/security/wnpa-sec-2023-05.html
NOTE: https://gitlab.com/wireshark/wireshark/-/issues/18796
CVE-2023-XXXX [wnpa-sec-2023-04: GNW dissector crash]
- wireshark 4.0.3-1
+ [bullseye] - wireshark <postponed> (Minor issue, fix along in future
update)
NOTE: https://www.wireshark.org/security/wnpa-sec-2023-04.html
NOTE: https://gitlab.com/wireshark/wireshark/-/issues/18779
CVE-2023-XXXX [wnpa-sec-2023-03: Dissection engine crash]
- wireshark 4.0.3-1
+ [bullseye] - wireshark <postponed> (Minor issue, fix along in future
update)
NOTE: https://www.wireshark.org/security/wnpa-sec-2023-03.html
NOTE: https://gitlab.com/wireshark/wireshark/-/issues/18766
CVE-2023-XXXX [wnpa-sec-2023-02: NFS dissector memory leak]
- wireshark 4.0.3-1
+ [bullseye] - wireshark <postponed> (Minor issue, fix along in future
update)
NOTE: https://www.wireshark.org/security/wnpa-sec-2023-02.html
NOTE: https://gitlab.com/wireshark/wireshark/-/issues/18628
CVE-2023-XXXX [wnpa-sec-2023-01: EAP dissector crash]
- wireshark 4.0.3-1
+ [bullseye] - wireshark <postponed> (Minor issue, fix along in future
update)
NOTE: https://www.wireshark.org/security/wnpa-sec-2023-01.html
NOTE: https://gitlab.com/wireshark/wireshark/-/issues/18622
CVE-2023-24059 (Grand Theft Auto V for PC allows attackers to achieve partial
remote c ...)
@@ -677,9 +684,10 @@ CVE-2023-0434 (Improper Input Validation in GitHub
repository pyload/pyload prio
CVE-2023-24054
RESERVED
CVE-2023-0433 (Heap-based Buffer Overflow in GitHub repository vim/vim prior
to 9.0.1 ...)
- - vim <unfixed>
+ - vim <unfixed> (unimportant)
NOTE: https://huntr.dev/bounties/ae933869-a1ec-402a-bbea-d51764c6618e/
NOTE:
https://github.com/vim/vim/commit/11977f917506d950b7e0cae558bd9189260b253b
(v9.0.1225)
+ NOTE: Crash in CLI tool, no security impact
CVE-2023-24053
RESERVED
CVE-2023-24052
@@ -4591,6 +4599,7 @@ CVE-2023-22746
RESERVED
CVE-2023-22745 (tpm2-tss is an open source software implementation of the
Trusted Comp ...)
- tpm2-tss <unfixed> (bug #1029369)
+ [bullseye] - tpm2-tss <no-dsa> (Minor issue)
NOTE: Fixed by:
https://github.com/tpm2-software/tpm2-tss/commit/306490c8d848c367faa2d9df81f5e69dab46ffb5
NOTE:
https://github.com/tpm2-software/tpm2-tss/security/advisories/GHSA-4j3v-fh23-vx67
CVE-2023-22744
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4c023ff2561f93e8ebcc48651fcda6fa15803434
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4c023ff2561f93e8ebcc48651fcda6fa15803434
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
