Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
389ead18 by Salvatore Bonaccorso at 2023-03-25T17:46:51+01:00
DSA 5378-1: Sync date with advisory
- - - - -
5e1026c7 by Salvatore Bonaccorso at 2023-03-25T17:56:00+01:00
Add Debian bug reference for CVE-2023-1370/json-smart
- - - - -
089f8785 by Salvatore Bonaccorso at 2023-03-25T17:58:40+01:00
Add Debian bug reference for CVE-2023-28708/tomcat9
- - - - -
2 changed files:
- data/CVE/list
- data/DSA/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -469,7 +469,7 @@ CVE-2023-28709
RESERVED
CVE-2023-28708 (When using the RemoteIpFilter with requests received from a
reverse pr ...)
- tomcat10 10.1.6-1
- - tomcat9 <unfixed>
+ - tomcat9 <unfixed> (bug #1033475)
- tomcat8 <removed>
NOTE: https://lists.apache.org/thread/hdksc59z3s7tm39x0pp33mtwdrt8qr67
NOTE: https://bz.apache.org/bugzilla/show_bug.cgi?id=66471
@@ -2255,7 +2255,7 @@ CVE-2023-1372 (The WH Testimonials plugin for WordPress
is vulnerable to Stored
CVE-2023-1371
RESERVED
CVE-2023-1370 ([Json-smart](https://netplex.github.io/json-smart/) is a
performance f ...)
- - json-smart <unfixed>
+ - json-smart <unfixed> (bug #1033474)
[bullseye] - json-smart <no-dsa> (Minor issue)
NOTE:
https://research.jfrog.com/vulnerabilities/stack-exhaustion-in-json-smart-leads-to-denial-of-service-when-parsing-malformed-json-xray-427633/
NOTE:
https://github.com/netplex/json-smart-v2/commit/5b3205d051952d3100aa0db1535f6ba6226bd87a
(2.4.9)
=====================================
data/DSA/list
=====================================
@@ -1,4 +1,4 @@
-[24 Mar 2023] DSA-5378-1 xen - security update
+[25 Mar 2023] DSA-5378-1 xen - security update
{CVE-2022-23824 CVE-2022-42331 CVE-2022-42332 CVE-2022-42333
CVE-2022-42334}
[bullseye] - xen 4.14.5+94-ge49571868d-1
[23 Mar 2023] DSA-5377-1 chromium - security update
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/9580166958934a77aa25d9aa6226252f7d0f5a08...089f8785c09ebcd6f3a3a4a1a0428947226f8a7a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/9580166958934a77aa25d9aa6226252f7d0f5a08...089f8785c09ebcd6f3a3a4a1a0428947226f8a7a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
