Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fd524306 by Moritz Muehlenhoff at 2023-07-14T23:56:26+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,13 +1,13 @@
CVE-2023-3673 (SQL Injection in GitHub repository pimcore/pimcore prior to
10.5.24.)
NOT-FOR-US: pimcore
CVE-2023-3672 (Cross-site Scripting (XSS) - DOM in GitHub repository
plaidweb/webment ...)
- TODO: check
+ NOT-FOR-US: plaidweb/webmention.js
CVE-2023-3633 (An out-of-bounds writevulnerability in Bitdefender Engines on
Windows ...)
NOT-FOR-US: Bitdefender
CVE-2023-3434 (Improper Input Validation in the hyperlink interpretation
inSavoir-fai ...)
- TODO: check
+ NOT-FOR-US: Savoir-faire Linux's Jami
CVE-2023-3433 (The "nickname" field within Savoir-faire Linux's Jami
application is s ...)
- TODO: check
+ NOT-FOR-US: Savoir-faire Linux's Jami
CVE-2023-38325 (The cryptography package before 41.0.2 for Python mishandles
SSH certi ...)
- python-cryptography <not-affected> (Vulnerable code not present)
NOTE: https://github.com/pyca/cryptography/issues/9207
@@ -22,9 +22,9 @@ CVE-2023-38252 (An out-of-bounds read flaw was found in w3m,
in the Strnew_size
- w3m <unfixed>
NOTE: https://github.com/tats/w3m/issues/270
CVE-2023-37474 (Copyparty is a portable file server. Versions prior to 1.8.2
are subje ...)
- TODO: check
+ NOT-FOR-US: copyparty
CVE-2023-37473 (zenstruck/collections is a set of helpers for
iterating/paginating/fil ...)
- TODO: check
+ NOT-FOR-US: zenstruck/collections
CVE-2023-37224 (An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6
and v.6. ...)
NOT-FOR-US: Archer
CVE-2023-37223 (Cross Site Scripting (XSS) vulnerability in Archer Platform
before v.6 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fd524306095eeeddaad2217dd5651180f8872bfe
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fd524306095eeeddaad2217dd5651180f8872bfe
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
