Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
24e72c07 by Salvatore Bonaccorso at 2023-09-06T08:48:18+02:00
Add three new mosquitto CVEs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -24177,7 +24177,9 @@ CVE-2023-28371 (In Stellarium through 1.2, attackers
can write to files that are
CVE-2023-28368 (TP-Link L2 switch T2600G-28SQ firmware versions prior to
'T2600G-28SQ( ...)
NOT-FOR-US: TP-Link
CVE-2023-28366 (The broker in Eclipse Mosquitto 1.3.2 through 2.x before
2.0.16 has a ...)
- TODO: check
+ - mosquitto <unfixed>
+ NOTE: https://mosquitto.org/blog/2023/08/version-2-0-16-released/
+ NOTE:
https://github.com/eclipse/mosquitto/commit/6113eac95a9df634fbc858be542c4a0456bfe7b9
(v2.0.16)
CVE-2023-28365 (A backup file vulnerability found in UniFi applications
(Version 7.3.8 ...)
NOT-FOR-US: UniFi
CVE-2023-28364 (An Open Redirect vulnerability exists prior to version
1.52.117, where ...)
@@ -31999,6 +32001,11 @@ CVE-2023-0810 (Cross-site Scripting (XSS) - Stored in
GitHub repository btcpayse
NOT-FOR-US: btcpayserver
CVE-2023-0809
RESERVED
+ - mosquitto <unfixed>
+ NOTE: https://mosquitto.org/blog/2023/08/version-2-0-16-released/
+CVE-2023-3592
+ - mosquitto <unfixed>
+ NOTE: https://mosquitto.org/blog/2023/08/version-2-0-16-released/
CVE-2023-0808 (A vulnerability was found in Deye/Revolt/Bosswerk Inverter
MW3_15U_540 ...)
NOT-FOR-US: Deye/Revolt/Bosswerk Inverter
CVE-2023-0807
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/24e72c07e97035e9b8cb0610c9a7bc271a99ce9c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/24e72c07e97035e9b8cb0610c9a7bc271a99ce9c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
