Markus Koschany pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
dd54db9e by Markus Koschany at 2023-06-18T17:50:08+02:00
Claim wordpress in dla-needed.txt
- - - - -
f43d96eb by Markus Koschany at 2023-06-18T17:52:42+02:00
CVE-2023-28709,tomcat10: bookworm,postponed
Fix when more important issues arise
- - - - -
4b955102 by Markus Koschany at 2023-06-18T17:54:54+02:00
CVE-2023-28709,tomcat10: fixed in unstable with version 10.1.10-1
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -12079,7 +12079,8 @@ CVE-2023-1552 (ToolboxST prior to version 7.10 is
affected by a deserialization
NOT-FOR-US: ToolboxST
CVE-2023-28709 (The fix for CVE-2023-24998 was incomplete for Apache Tomcat
11.0.0-M2 ...)
[experimental] - tomcat10 10.1.8-1
- - tomcat10 <unfixed>
+ - tomcat10 10.1.10-1
+ -[bookworm] - tomcat10 <postponed> (Fix when more important issues
arise)
- tomcat9 <not-affected> (Incomplete fix for CVE-2023-24998 not applied)
NOTE:
https://github.com/apache/tomcat/commit/ba848da71c523d94950d3c53c19ea155189df9dc
(10.1.8)
NOTE:
https://github.com/apache/tomcat/commit/fbd81421629afe8b8a3922d59020cde81caea861
(9.0.74)
=====================================
data/dla-needed.txt
=====================================
@@ -219,7 +219,7 @@ webkit2gtk (Emilio)
NOTE: 20230606: one issue remaining (cmake), but call for testing sent out
already:
NOTE: 20230606: https://lists.debian.org/debian-lts/2023/06/msg00005.html
(pochu)
--
-wordpress
+wordpress (Markus Koschany)
NOTE: 20230614: Added by Front-Desk (opal)
--
xmltooling (Santiago)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5cbb107a75d058f9435c189b6ab0ff468c3e11c3...4b9551028d80b5e9abc4920f54d2906af60f186d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5cbb107a75d058f9435c189b6ab0ff468c3e11c3...4b9551028d80b5e9abc4920f54d2906af60f186d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
