Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker
Commits:
dacff47d by Chris Lamb at 2023-09-08T13:24:15-07:00
Triage CVE-2021-46310 & CVE-2021-46312 in djvulibre for buster LTS.
- - - - -
6cefff8b by Chris Lamb at 2023-09-08T13:24:16-07:00
Triage CVE-2023-40184 in xrdp for buster LTS.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1370,6 +1370,7 @@ CVE-2023-40184 (xrdp is an open source remote desktop
protocol (RDP) server. In
- xrdp <unfixed> (bug #1051061)
[bookworm] - xrdp <no-dsa> (Minor issue)
[bullseye] - xrdp <no-dsa> (Minor issue)
+ [buster] - xrdp <no-dsa> (Minor issue)
NOTE:
https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-f489-557v-47jq
NOTE:
https://github.com/neutrinolabs/xrdp/commit/25a1fab5b6c5ef2a8bb109232b765cb8b332ce5e
CVE-2023-40181 (FreeRDP is a free implementation of the Remote Desktop
Protocol (RDP), ...)
@@ -120105,6 +120106,7 @@ CVE-2021-46312 (An issue was discovered
IW44EncodeCodec.cpp in djvulibre 3.5.28
- djvulibre <unfixed>
[bookworm] - djvulibre <no-dsa> (Minor issue)
[bullseye] - djvulibre <no-dsa> (Minor issue)
+ [buster] - djvulibre <no-dsa> (Minor issue)
NOTE: https://sourceforge.net/p/djvu/bugs/344/
CVE-2021-46311 (A NULL pointer dereference vulnerability exists in GPAC v1.1.0
via the ...)
- gpac 2.0.0+dfsg1-2
@@ -120117,6 +120119,7 @@ CVE-2021-46310 (An issue was discovered IW44Image.cpp
in djvulibre 3.5.28 in all
- djvulibre <unfixed>
[bookworm] - djvulibre <no-dsa> (Minor issue)
[bullseye] - djvulibre <no-dsa> (Minor issue)
+ [buster] - djvulibre <no-dsa> (Minor issue)
NOTE: https://sourceforge.net/p/djvu/bugs/345/
CVE-2021-46309 (An SQL Injection vulnerability exists in Sourcecodester
Employee and V ...)
NOT-FOR-US: Sourcecodester
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/71a110bf3a282a4f20e90442f230a20b5c747fe5...6cefff8b5e623f25029c69d9d6155a68585c3c44
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/71a110bf3a282a4f20e90442f230a20b5c747fe5...6cefff8b5e623f25029c69d9d6155a68585c3c44
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
