Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker
Commits:
0bb66ef8 by Chris Lamb at 2023-07-13T13:43:25+01:00
Triage CVE-2023-37174, CVE-2023-37765, CVE-2023-37766 & CVE-2023-37767 in
gpac for buster LTS.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -305,14 +305,17 @@ CVE-2023-3011 (The ARMember plugin for WordPress is
vulnerable to Cross-Site Req
NOT-FOR-US: ARMember plugin for WordPress
CVE-2023-37767 (GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to
contain a seg ...)
- gpac <unfixed>
+ [buster] - gpac <end-of-life> (EOL in buster LTS)
NOTE: https://github.com/gpac/gpac/issues/2514
NOTE:
https://github.com/gpac/gpac/commit/d414df635c773b21bbb3a9fbf17b101b1e8ea345
CVE-2023-37766 (GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to
contain a seg ...)
- gpac <unfixed>
+ [buster] - gpac <end-of-life> (EOL in buster LTS)
NOTE: https://github.com/gpac/gpac/issues/2516
NOTE:
https://github.com/gpac/gpac/commit/a64c60ef0983be6db8ab1e4a663e0ce83ff7bf2c
CVE-2023-37765 (GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to
contain a seg ...)
- gpac <unfixed>
+ [buster] - gpac <end-of-life> (EOL in buster LTS)
NOTE: https://github.com/gpac/gpac/issues/2515
NOTE:
https://github.com/gpac/gpac/commit/36e1b9900ff638576cb88636bbbe2116ed06dfdc
CVE-2023-37200 (A CWE-611: Improper Restriction of XML External Entity
Reference vulne ...)
@@ -327,6 +330,7 @@ CVE-2023-37196 (A CWE-89: Improper Neutralization of
Special Elements vulnerabil
NOT-FOR-US: Schneider Electric
CVE-2023-37174 (GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to
contain a seg ...)
- gpac <unfixed>
+ [buster] - gpac <end-of-life> (EOL in buster LTS)
NOTE: https://github.com/gpac/gpac/issues/2505
NOTE:
https://github.com/gpac/gpac/commit/549ff4484246f2bc4d5fec6760332b43774db483
CVE-2023-32200 (There is insufficient restrictions of called script functions
in Apach ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0bb66ef80582fe85aba27188df6f38ec9cd796ec
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0bb66ef80582fe85aba27188df6f38ec9cd796ec
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
