Guilhem Moulin pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2da979ec by Guilhem Moulin at 2023-07-19T00:39:49+02:00
Reserve DLA-3499-1 for libapache2-mod-auth-openidc
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -111492,7 +111492,6 @@ CVE-2022-23528
CVE-2022-23527 (mod_auth_openidc is an OpenID Certified\u2122 authentication
and autho ...)
- libapache2-mod-auth-openidc 2.4.12.2-1 (bug #1026444)
[bullseye] - libapache2-mod-auth-openidc 2.4.9.4-0+deb11u2
- [buster] - libapache2-mod-auth-openidc <no-dsa> (Minor issue)
NOTE:
https://github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-q6f2-285m-gr53
NOTE:
https://github.com/zmartzone/mod_auth_openidc/commit/87119f44b9a88312dbc1f752d720bcd2371b94a8
(v2.4.12.2)
CVE-2022-23526 (Helm is a tool for managing Charts, pre-configured Kubernetes
resource ...)
@@ -139809,7 +139808,6 @@ CVE-2021-39192 (Ghost is a Node.js content management
system. An error in the im
CVE-2021-39191 (mod_auth_openidc is an authentication/authorization module for
the Apa ...)
- libapache2-mod-auth-openidc 2.4.9.4-1 (bug #993648)
[bullseye] - libapache2-mod-auth-openidc 2.4.9.4-0+deb11u1
- [buster] - libapache2-mod-auth-openidc <no-dsa> (Minor issue; can be
fixed via point release)
[stretch] - libapache2-mod-auth-openidc <no-dsa> (Minor issue)
NOTE:
https://github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-2pgf-8h6h-gqg2
NOTE:
https://github.com/zmartzone/mod_auth_openidc/commit/03e6bfb446f4e3f27c003d30d6a433e5dd8e2b3d
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[19 Jul 2023] DLA-3499-1 libapache2-mod-auth-openidc - security update
+ {CVE-2021-39191 CVE-2022-23527}
+ [buster] - libapache2-mod-auth-openidc 2.3.10.2-1+deb10u3
[18 Jul 2023] DLA-3498-1 bind9 - security update
{CVE-2023-2828}
[buster] - bind9 1:9.11.5.P4+dfsg-5.1+deb10u9
=====================================
data/dla-needed.txt
=====================================
@@ -80,10 +80,6 @@ imagemagick
--
iperf3 (Markus Koschany)
--
-libapache2-mod-auth-openidc (guilhem)
- NOTE: 20230620: Added by Front-Desk (Beuc)
- NOTE: 20230620: Follow fix from bullseye 11.7 (CVE-2022-23527) + 1 postponed
CVE-2021-39191 (Beuc/front-desk)
---
libreoffice (Abhijith PA)
NOTE: 20230530: Added by Front-Desk (pochu)
NOTE: 20230718: http://people.debian.org/~abhijith/upload/lo (abhijith)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2da979ecb1f86e6827671057f764ce3f3a3b7195
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2da979ecb1f86e6827671057f764ce3f3a3b7195
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
