Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8014bf8c by Salvatore Bonaccorso at 2024-03-01T21:17:15+01:00
Update information for CVE-2023-6681/python-jwcrypto
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5091,10 +5091,11 @@ CVE-2024-1454 (The use-after-free vulnerability was
found in the AuthentIC drive
NOTE: https://github.com/OpenSC/OpenSC/wiki/CVE-2024-1454
NOTE: Fixed by:
https://github.com/OpenSC/OpenSC/commit/5835f0d4f6c033bd58806d33fa546908d39825c9
CVE-2023-6681 (A vulnerability was found in JWCrypto. This flaw allows an
attacker to ...)
- - python-jwcrypto <unfixed>
+ - python-jwcrypto 1.5.4-1
[bookworm] - python-jwcrypto <no-dsa> (Minor issue)
[bullseye] - python-jwcrypto <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2260843
+ NOTE:
https://github.com/latchset/jwcrypto/commit/d2655d370586cb830e49acfb450f87598da60be8
(v1.5.1)
CVE-2023-6110 [deleting a non existing access rule deletes another existing
access rule in it's scope]
- python-openstackclient 6.3.0-2
[bookworm] - python-openstackclient <no-dsa> (Minor issue)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8014bf8cd56ba0551a1da10a1409a48466071f42
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8014bf8cd56ba0551a1da10a1409a48466071f42
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
