Markus Koschany pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0584393d by Markus Koschany at 2023-09-24T23:53:05+02:00
Link to jss bug report
- - - - -
ad87c4af by Markus Koschany at 2023-09-25T00:02:51+02:00
Add prometheus-alertmanager to dla-needed.txt
- - - - -
3237caa5 by Markus Koschany at 2023-09-25T00:10:11+02:00
Add phppgadmin to dla-needed.txt
- - - - -
ac0b8e12 by Markus Koschany at 2023-09-25T00:12:59+02:00
Add puma to dla-needed.txt
- - - - -
ca49e4d1 by Markus Koschany at 2023-09-25T00:25:41+02:00
Add osslsigncode to dla-needed.txt
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -53763,7 +53763,7 @@ CVE-2022-4133
REJECTED
CVE-2022-4132 [Tomcat: Memory leak in JSS]
RESERVED
- - jss <unfixed>
+ - jss <unfixed> (bug #1052575)
[buster] - jss <not-affected> (The vulnerable code was introduced later)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2147372
NOTE: Triggered by: https://github.com/dogtagpki/jss/pull/928
=====================================
data/dla-needed.txt
=====================================
@@ -161,12 +161,26 @@ open-vm-tools (Sean Whitton)
opendkim
NOTE: 20230821: Added by Front-Desk (ta)
--
+osslsigncode
+ NOTE: 20230925: Added by Front-Desk (apo)
+ NOTE: 20230925: Maybe a new upstream release should just do the trick here.
+--
+phppgadmin
+ NOTE: 20230925: Added by Front-Desk (apo)
+--
poppler
NOTE: 20230908: Added by Front-Desk (lamby)
NOTE: 20230908: Added due to CVE-2020-23804. However, please check
CVE-2020-18839
NOTE: 20230908: as I suspect this is a duplicate of CVE-2020-27778 (which
has already
NOTE: 20230908: been fixed). (lamby)
--
+prometheus-alertmanager
+ NOTE: 20230925: Added by Front-Desk (apo)
+ NOTE: 20230925: Vulnerable code is in
ui/app/src/Views/AlertList/AlertView.elm
+--
+puma
+ NOTE: 20230925: Added by Front-Desk (apo)
+--
python-git
NOTE: 20230923: Added by Front-Desk (apo)
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/670c7491ac5b41d8e232a71bf289dd5d0b3e1775...ca49e4d19a3118dec3be56686339c9b5b6dbc129
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/670c7491ac5b41d8e232a71bf289dd5d0b3e1775...ca49e4d19a3118dec3be56686339c9b5b6dbc129
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
