Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
93c25739 by Moritz Muehlenhoff at 2024-02-23T23:29:45+01:00
bullseye/bookworm triage
- - - - -
2 changed files:
- data/CVE/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -23267,8 +23267,8 @@ CVE-2023-39333
NOTE:
https://github.com/nodejs/node/commit/eaf9083cf1e43bd897ac8244dcc0f4e3500150ca
CVE-2023-5388
- nss 2:3.98-1 (bug #1056284)
- [bookworm] - nss <postponed> (Minor issue, revisit once fixed upstream)
- [bullseye] - nss <postponed> (Minor issue, revisit once fixed upstream)
+ [bookworm] - nss <no-dsa> (Minor issue)
+ [bullseye] - nss <no-dsa> (Minor issue)
[buster] - nss <no-dsa> (Minor issue)
NOTE: https://people.redhat.com/~hkario/marvin/
NOTE: Vendor patch (Rocky Linux, not upstreamed):
https://git.rockylinux.org/staging/rpms/nss/-/commit/1f7f7523b61a2ada2f461548c4160fbbf979c5dd
@@ -53132,6 +53132,8 @@ CVE-2023-28658 (Insecure inherited permissions in some
Intel(R) oneMKL software
NOT-FOR-US: Intel
CVE-2023-27517 (Improper access control in some Intel(R) Optane(TM) PMem
software befo ...)
- ipmctl 03.00.00.0485-1
+ [bookworm] - ipmctl <no-dsa> (Minor issue)
+ [bullseye] - ipmctl <no-dsa> (Minor issue)
NOTE:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html
TODO: full details not clear but affects the "Intel Optane Pmem
{1,2,3}00Series management software (ipmctl)
CVE-2023-26589 (Use after free in some Intel(R) Aptio* V UEFI Firmware
Integrator Tool ...)
=====================================
data/dsa-needed.txt
=====================================
@@ -51,7 +51,7 @@ nodejs
--
opennds/stable
--
-openvswitch
+openvswitch (jmm)
Maintainer sent debdiff for CVE-2023-3966, but there are other CVE fixes
which might be piggy backed.
--
php-cas/oldstable
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/93c25739ec8a8fad68f86a760ba5b4531e237c26
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/93c25739ec8a8fad68f86a760ba5b4531e237c26
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
