Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b9cddf7a by Moritz Muehlenhoff at 2024-01-29T12:36:29+01:00
NFU
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -115,7 +115,7 @@ CVE-2024-0618 (The Contact Form Plugin \u2013 Fastest
Contact Form Builder Plugi
CVE-2023-6497 (The WordPress Simple Shopping Cart plugin for WordPress is
vulnerable ...)
NOT-FOR-US: WordPress plugin
CVE-2023-6482 (Use of encryption key derived from static information in
Synaptics Fin ...)
- TODO: check
+ NOT-FOR-US: Synaptics
CVE-2023-6470
REJECTED
CVE-2023-52389 (UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer
overflow a ...)
@@ -6006,7 +6006,6 @@ CVE-2023-51774 (The json-jwt (aka JSON::JWT) gem 1.16.3
for Ruby sometimes allow
- ruby-json-jwt <unfixed>
NOTE: https://github.com/P3ngu1nW/CVE_Request/blob/main/novjson-jwt.md
NOTE: https://github.com/nov/json-jwt/issues/113
- TODO: check if reported upstream
CVE-2023-51773 (BACnet Stack before 1.3.2 has a decode function APDU buffer
over-read ...)
NOT-FOR-US: BACnet Stack
CVE-2023-51654 (Improper link resolution before file access ('Link Following')
issue e ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b9cddf7a04894f4e0617a100101283c60fd52c2c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b9cddf7a04894f4e0617a100101283c60fd52c2c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits