Guilhem Moulin pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f3a1ec4e by Guilhem Moulin at 2023-11-27T00:30:31+01:00
Triage CVE-2023-4535/opensc for buster and bullseye.
Symmetric encryption support for MyEID driver was introduced in 0.23.0-rc1.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3029,9 +3029,11 @@ CVE-2023-4996 (Netskope was made aware of a security
vulnerability in its NSClie
CVE-2023-4535 (An out-of-bounds read vulnerability was found in OpenSC
packages withi ...)
- opensc 0.23.0-2 (bug #1055520)
[bookworm] - opensc <no-dsa> (Minor issue)
- [bullseye] - opensc <no-dsa> (Minor issue)
+ [bullseye] - opensc <not-affected> (vulnerable code introduced later)
+ [buster] - opensc <not-affected> (vulnerable code introduced later)
NOTE: https://github.com/OpenSC/OpenSC/wiki/CVE-2023-4535
NOTE: Fixed by:
https://github.com/OpenSC/OpenSC/commit/f1993dc4e0b33050b8f72a3558ee88b24c4063b2
(0.24.0-rc1)
+ NOTE: Introduced by:
https://github.com/OpenSC/OpenSC/commit/c852236e8368b47b38d89b1b7fb2dbd78753e109
(0.23.0-rc1)
CVE-2023-47186 (Cross-Site Request Forgery (CSRF) vulnerability in Kadence WP
Kadence ...)
NOT-FOR-US: WordPress plugin
CVE-2023-47185 (Unauth. Stored Cross-Site Scripting (XSS) vulnerability in
gVectors Te ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f3a1ec4e290849b2c6d21a49886fce3e0727f167
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f3a1ec4e290849b2c6d21a49886fce3e0727f167
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
