Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5fcd0ce5 by Salvatore Bonaccorso at 2023-09-13T06:40:25+02:00
Track mfsa2023-40 for CVE-2023-4863 issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -251,11 +251,15 @@ CVE-2023-4887 (The Google Maps Plugin by Intergeo for
WordPress plugin for WordP
CVE-2023-4863 (Heap buffer overflow in WebP in Google Chrome prior to
116.0.5845.187 ...)
- chromium <unfixed> (unimportant)
[buster] - chromium <end-of-life> (see DSA 5046)
+ - firefox <unfixed>
+ - firefox-esr <unfixed>
+ - thunderbird <unfixed>
- libwebp <unfixed> (bug #1051787)
NOTE:
https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html
NOTE: src:chromium builds against the system libwebp library
NOTE: Fixed by:
https://chromium.googlesource.com/webm/libwebp.git/+/902bc9190331343b2017211debcec8d2ab87e17a%5E%21/
NOTE: Followup:
https://chromium.googlesource.com/webm/libwebp.git/+/95ea5226c870449522240ccff26f0b006037c520%5E%21/#F0
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/#CVE-2023-4863
CVE-2023-4840 (The MapPress Maps for WordPress plugin for WordPress is
vulnerable to ...)
NOT-FOR-US: MapPress Maps for WordPress plugin for WordPress
CVE-2023-42472 (Due to insufficient file type validation, SAP
BusinessObjectsBusiness ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5fcd0ce5ba2c280cd08408a917226ab4f581c62d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5fcd0ce5ba2c280cd08408a917226ab4f581c62d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
