Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9bdb62ea by Salvatore Bonaccorso at 2023-12-20T06:47:51+01:00
Track fixed version for CVE-2023-6135/nss via unstable
- - - - -
69fe029d by Salvatore Bonaccorso at 2023-12-20T06:49:28+01:00
Add references for CVE-2023-6135/nss
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -195,10 +195,14 @@ CVE-2023-6856 (The WebGL `DrawElementsInstanced` method
was susceptible to a hea
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2023-55/#CVE-2023-6856
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2023-54/#CVE-2023-6856
CVE-2023-6135 (Multiple NSS NIST curves were susceptible to a side-channel
attack kno ...)
- - nss <unfixed> (bug #1059054)
+ - nss 2:3.95-1 (bug #1059054)
- firefox 121.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2023-56/#CVE-2023-6135
NOTE: https://bugzilla.mozilla.org/show_bug.cgi?id=1853908 (not public)
+ NOTE: Fixed via: https://bugzilla.mozilla.org/show_bug.cgi?id=1861728
+ NOTE:
https://hg.mozilla.org/projects/nss/rev/e68b42b773657000078d104aaccbe26e71a1e0be
+ NOTE: Fixed via: https://bugzilla.mozilla.org/show_bug.cgi?id=1863605
+ NOTE:
https://hg.mozilla.org/projects/nss/rev/39f0db972e9d4803f386585bc4d8858ad6f019b8
CVE-2023-49734 (An authenticated Gamma user has the ability to create a
dashboard and ...)
NOT-FOR-US: Apache Superset
CVE-2023-49736 (A where_in JINJA macro allows users to specify a quote, which
combined ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/92950a93c5cd26d1a1479d19b711d210b7ff53c4...69fe029da13d0e038f008d18ca146fb55f6f7d33
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/92950a93c5cd26d1a1479d19b711d210b7ff53c4...69fe029da13d0e038f008d18ca146fb55f6f7d33
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
