Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a687f0ed by Salvatore Bonaccorso at 2023-12-06T07:56:02+01:00
Add CVE-2023-41835/libstruts1.2-java
It *might* be that this is actually not-affected for older series than
2.x, but this is not clear if upstream just mentions 2.x onwards since
1.2 is long legacy and deprecated.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -102,7 +102,9 @@ CVE-2023-43628 (An integer overflow vulnerability exists in
the NTRIP Stream Par
CVE-2023-43608 (A data integrity vulnerability exists in the
BR_NO_CHECK_HASH_FOR func ...)
NOT-FOR-US: Buildroot
CVE-2023-41835 (When a Multipart request is performed but some of the fields
exceed th ...)
- TODO: check
+ - libstruts1.2-java <removed>
+ NOTE: https://lists.apache.org/thread/6wj530kh3ono8phr642y9sqkl67ys2ft
+ NOTE: https://cwiki.apache.org/confluence/display/WW/S2-065
CVE-2023-49070 (Pre-auth RCE in Apache Ofbiz 18.12.09. It's due to XML-RPCno
longer m ...)
NOT-FOR-US: Apache OFBiz
CVE-2023-6269 (An argument injection vulnerability has been identified in the
admini ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a687f0eda0ddd37582e162fd6f3478e402339b1f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a687f0eda0ddd37582e162fd6f3478e402339b1f
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
