[Git][security-tracker-team/security-tracker][master] Reserve DSA-5381-1 for tomcat9

[Markus Koschany (@apo)]

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker


Commits:
baa5071f by Markus Koschany at 2023-04-05T21:50:16+02:00
Reserve DSA-5381-1 for tomcat9

- - - - -


2 changed files:

- data/CVE/list
- data/DSA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -31967,7 +31967,6 @@ CVE-2022-3933 (The Essential Real Estate WordPress plugin before 3.9.6 does not
 	NOT-FOR-US: WordPress plugin
 CVE-2022-45143 (The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and ...)
 	- tomcat9 9.0.70-1
-	[bullseye] - tomcat9 <postponed> (Minor issue, fix along in future update)
 	[buster] - tomcat9 <not-affected> (The vulnerable code was introduced later)
 	- tomcat8 <removed>
 	NOTE: https://github.com/apache/tomcat/commit/b336f4e58893ea35114f1e4a415657f723b1298e (9.0.69)
@@ -42817,7 +42816,6 @@ CVE-2022-42253
 	RESERVED
 CVE-2022-42252 (If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10. ...)
 	- tomcat9 9.0.68-1
-	[bullseye] - tomcat9 <postponed> (Minor issue, fix along in future update)
 	- tomcat8 <removed>
 	NOTE: https://lists.apache.org/thread/zzcxzvqfdqn515zfs3dxb7n8gty589sq
 	NOTE: https://github.com/apache/tomcat/commit/4c7f4fd09d2cc1692112ef70b8ee23a7a037ae77 (9.0.68)


=====================================
data/DSA/list
=====================================
@@ -1,3 +1,6 @@
+[05 Apr 2023] DSA-5381-1 tomcat9 - security update
+	{CVE-2022-42252 CVE-2022-45143 CVE-2023-28708}
+	[bullseye] - tomcat9 9.0.43-2~deb11u6
 [29 Mar 2023] DSA-5380-1 xorg-server - security update
 	{CVE-2023-1393}
 	[bullseye] - xorg-server 2:1.20.11-1+deb11u6



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/baa5071fa0ec69cb89324abe638a02ca28a68978

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/baa5071fa0ec69cb89324abe638a02ca28a68978
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230405/97aeb4b5/attachment-0001.htm>