Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
81a98c4b by Emilio Pozuelo Monfort at 2023-09-15T11:38:22+02:00
Triage webkit2gtk CVEs as EOL on buster
- - - - -
07708193 by Emilio Pozuelo Monfort at 2023-09-15T11:39:06+02:00
Mark CVE-2023-41000/gpac as EOL on buster
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -625,6 +625,7 @@ CVE-2023-41103 (Interact 7.9.79.5 allows stored Cross-site
Scripting (XSS) attac
CVE-2023-41000 (GPAC through 2.2.1 has a use-after-free vulnerability in the
function ...)
- gpac <unfixed> (bug #1051955)
[bullseye] - gpac <ignored> (Minor issue)
+ [buster] - gpac <end-of-life> (EOL in buster LTS)
NOTE: https://github.com/gpac/gpac/issues/2550
NOTE: Fixed by:
https://github.com/gpac/gpac/commit/0018b5e4e07a1465287e7dff69b387929f5a75fa
CVE-2023-40946 (Schoolmate 1.3 is vulnerable to SQL Injection in the variable
$usernam ...)
@@ -903,6 +904,7 @@ CVE-2023-41053 (Redis is an in-memory database that
persists on disk. Redis does
CVE-2023-40397 (The issue was addressed with improved checks. This issue is
fixed in m ...)
{DSA-5468-1}
- webkit2gtk 2.40.5-1
+ [buster] - webkit2gtk <end-of-life> (webkit2gtk EOL in buster)
- wpewebkit 2.40.5-1
[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security
support in Bookworm)
NOTE: https://webkitgtk.org/security/WSA-2023-0008.html
@@ -1129,6 +1131,7 @@ CVE-2023-32379 (A buffer overflow issue was addressed
with improved memory handl
CVE-2023-32370 (A logic issue was addressed with improved validation. This
issue is fi ...)
{DSA-5396-1}
- webkit2gtk 2.40.1-1
+ [buster] - webkit2gtk <end-of-life> (webkit2gtk EOL in buster)
- wpewebkit 2.40.2-2
[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security
support in Bookworm)
NOTE: https://webkitgtk.org/security/WSA-2023-0008.html
@@ -26017,6 +26020,7 @@ CVE-2023-28199 (An out-of-bounds read issue existed
that led to the disclosure o
CVE-2023-28198 (A use-after-free issue was addressed with improved memory
management. ...)
{DSA-5396-1}
- webkit2gtk 2.40.1-1
+ [buster] - webkit2gtk <end-of-life> (webkit2gtk EOL in buster)
- wpewebkit 2.40.2-2
[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security
support in Bookworm)
NOTE: https://webkitgtk.org/security/WSA-2023-0008.html
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/e2136716a9d0336a9b5c8a65c62c180c5b9c3c03...07708193c722a0aa4c24b5aebb0167ca7f497e9f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/e2136716a9d0336a9b5c8a65c62c180c5b9c3c03...07708193c722a0aa4c24b5aebb0167ca7f497e9f
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
