Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1e61ec30 by Salvatore Bonaccorso at 2024-01-20T15:56:46+01:00
Track proposed update for gnutls28 via bookworm-pu
- - - - -
f30f93b0 by Salvatore Bonaccorso at 2024-01-20T16:01:02+01:00
Update status for CVE-2024-0553 and CVE-2024-0567
- - - - -
2 changed files:
- data/CVE/list
- data/next-point-update.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -826,6 +826,8 @@ CVE-2024-0569 (A vulnerability classified as problematic
has been found in Totol
NOT-FOR-US: Totolink
CVE-2024-0567 (A vulnerability was found in GnuTLS, where a cockpit (which
uses gnuTL ...)
- gnutls28 3.8.3-1 (bug #1061045)
+ [bookworm] - gnutls28 <no-dsa> (Minor issue)
+ [bullseye] - gnutls28 <no-dsa> (Minor issue)
NOTE: https://gitlab.com/gnutls/gnutls/-/issues/1521
NOTE: https://gnutls.org/security-new.html#GNUTLS-SA-2024-01-09
NOTE:
https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html
@@ -838,6 +840,8 @@ CVE-2024-0554 (A Cross-site scripting (XSS) vulnerability
has been found on WIC1
NOT-FOR-US: WIC200
CVE-2024-0553 (A vulnerability was found in GnuTLS. The response times to
malformed c ...)
- gnutls28 3.8.3-1 (bug #1061046)
+ [bookworm] - gnutls28 <no-dsa> (Minor issue)
+ [bullseye] - gnutls28 <not-affected> (Incomplete fix for CVE-2023-5981
not published officially in any Debian bullseye release)
NOTE: https://gitlab.com/gnutls/gnutls/-/issues/1522
NOTE: https://gnutls.org/security-new.html#GNUTLS-SA-2024-01-14
NOTE:
https://gitlab.com/gnutls/gnutls/-/commit/40dbbd8de499668590e8af51a15799fbc430595e
(3.8.3)
=====================================
data/next-point-update.txt
=====================================
@@ -92,3 +92,7 @@ CVE-2022-48303
[bookworm] - tar 1.34+dfsg-1.2+deb12u1
CVE-2023-39804
[bookworm] - tar 1.34+dfsg-1.2+deb12u1
+CVE-2024-0567
+ [bookworm] - gnutls28 3.7.9-2+deb12u2
+CVE-2024-0553
+ [bookworm] - gnutls28 3.7.9-2+deb12u2
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/a6b3131869904b7dc429e1057752eb20728d4376...f30f93b036b864eb245daf7dec5f70a824a7fb5c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/a6b3131869904b7dc429e1057752eb20728d4376...f30f93b036b864eb245daf7dec5f70a824a7fb5c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
