[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Apr 17 09:10:26 BST 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
92d1660c by security tracker role at 2023-04-17T08:10:14+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,9 @@
+CVE-2023-30775
+	RESERVED
+CVE-2023-30774
+	RESERVED
+CVE-2023-2109 (Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoo ...)
+	TODO: check
 CVE-2023-2108 (A vulnerability has been found in SourceCodester Judging Management Sy ...)
 	TODO: check
 CVE-2023-30773
@@ -97,8 +103,8 @@ CVE-2023-30772 (The Linux kernel before 6.2.9 has a race condition and resultant
 	- linux <unfixed> (unimportant)
 	NOTE: https://git.kernel.org/linus/06615d11cc78162dfd5116efb71f29eb29502d37 (6.3-rc4)
 	NOTE: CONFIG_CHARGER_DA9150 not enabled in Debian.
-CVE-2023-30770
-	RESERVED
+CVE-2023-30770 (A stack-based buffer overflow vulnerability was found in the ASUSTOR D ...)
+	TODO: check
 CVE-2023-30769
 	RESERVED
 CVE-2023-30757
@@ -17152,8 +17158,7 @@ CVE-2023-0585 (The All in One SEO Pack plugin for WordPress is vulnerable to Sto
 	NOT-FOR-US: All in One SEO Pack plugin for WordPress
 CVE-2016-15023 (A vulnerability, which was classified as problematic, was found in Sit ...)
 	NOT-FOR-US: SiteFusion
-CVE-2023-24831
-	RESERVED
+CVE-2023-24831 (Improper Authentication vulnerability in Apache Software Foundation Ap ...)
 	NOT-FOR-US: Apache IoTDB
 CVE-2023-24828 (Onedev is a self-hosted Git Server with CI/CD and Kanban. In versions  ...)
 	NOT-FOR-US: Onedev



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/92d1660c186e74bc52c5d1ce0c4a85b474164318

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/92d1660c186e74bc52c5d1ce0c4a85b474164318
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230417/b60edd65/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list