Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d32e1d57 by Salvatore Bonaccorso at 2024-02-21T07:12:26+01:00
Track fixed version via unstable for CVE-2023-5388/nss
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -22376,13 +22376,13 @@ CVE-2023-39333
NOTE:
https://nodejs.org/en/blog/vulnerability/october-2023-security-releases#code-injection-via-webassembly-export-names-low---cve-2023-39333
NOTE:
https://github.com/nodejs/node/commit/eaf9083cf1e43bd897ac8244dcc0f4e3500150ca
CVE-2023-5388
- - nss <unfixed> (bug #1056284)
+ - nss 2:3.98-1 (bug #1056284)
[bookworm] - nss <postponed> (Minor issue, revisit once fixed upstream)
[bullseye] - nss <postponed> (Minor issue, revisit once fixed upstream)
[buster] - nss <no-dsa> (Minor issue)
NOTE: https://people.redhat.com/~hkario/marvin/
NOTE: Vendor patch (Rocky Linux, not upstreamed):
https://git.rockylinux.org/staging/rpms/nss/-/commit/1f7f7523b61a2ada2f461548c4160fbbf979c5dd
- NOTE: Upstream patch:
https://hg.mozilla.org/projects/nss/rev/196716d8377ab427e326f20bff2d026e90ac69e2
+ NOTE: Fixed by:
https://hg.mozilla.org/projects/nss/rev/196716d8377ab427e326f20bff2d026e90ac69e2
CVE-2023-5551 (Separate Groups mode restrictions were not honoured in the
forum summa ...)
- moodle <removed>
CVE-2023-5550 (In a shared hosting environment that has been misconfigured to
allow a ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d32e1d57904b96f852693dfb2cf76ccdabcd5886
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d32e1d57904b96f852693dfb2cf76ccdabcd5886
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
