Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5ba43d7d by Salvatore Bonaccorso at 2024-01-16T22:02:21+01:00
Add CVE-2024-0553/gnutls28
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -58,7 +58,11 @@ CVE-2024-0555 (A Cross-Site Request Forgery (CSRF)
vulnerability has been found
CVE-2024-0554 (A Cross-site scripting (XSS) vulnerability has been found on
WIC1200, ...)
NOT-FOR-US: WIC200
CVE-2024-0553 (A vulnerability was found in GnuTLS. The response times to
malformed c ...)
- TODO: check
+ - gnutls28 <unfixed>
+ NOTE: https://gitlab.com/gnutls/gnutls/-/issues/1522
+ NOTE:
https://gitlab.com/gnutls/gnutls/-/commit/40dbbd8de499668590e8af51a15799fbc430595e
(3.8.3)
+ NOTE:
https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html
+ NOTE: Issue exists because of incomplete fix for CVE-2023-5981
CVE-2024-0507 (An attacker with access to a Management Console user account
with the ...)
TODO: check
CVE-2024-0239 (The Contact Form 7 Connector WordPress plugin before 1.2.3 does
not sa ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5ba43d7dd57f1be6eb0e5d09e16ac3923e8addab
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5ba43d7dd57f1be6eb0e5d09e16ac3923e8addab
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
