[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Apr 29 21:12:33 BST 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f52e1fd0 by security tracker role at 2023-04-29T20:12:22+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2644,16 +2644,19 @@ CVE-2023-1998 (The Linux kernel allows userspace processes to enable mitigations
 CVE-2023-1995
 	RESERVED
 CVE-2023-1994 (GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12  ...)
+	{DLA-3402-1}
 	[experimental] - wireshark 4.0.5-1~exp1
 	- wireshark <unfixed> (bug #1034721)
 	NOTE: https://gitlab.com/wireshark/wireshark/-/issues/18947
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2023-11.html
 CVE-2023-1993 (LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6 ...)
+	{DLA-3402-1}
 	[experimental] - wireshark 4.0.5-1~exp1
 	- wireshark <unfixed> (bug #1034721)
 	NOTE: https://gitlab.com/wireshark/wireshark/-/issues/18900
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2023-10.html
 CVE-2023-1992 (RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6. ...)
+	{DLA-3402-1}
 	[experimental] - wireshark 4.0.5-1~exp1
 	- wireshark <unfixed> (bug #1034721)
 	NOTE: https://gitlab.com/wireshark/wireshark/-/issues/18852
@@ -2854,8 +2857,8 @@ CVE-2023-30443
 	RESERVED
 CVE-2023-30442
 	RESERVED
-CVE-2023-30441
-	RESERVED
+CVE-2023-30441 (IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8 ...)
+	TODO: check
 CVE-2023-30440
 	RESERVED
 CVE-2023-30439
@@ -11465,6 +11468,7 @@ CVE-2023-1163 (A vulnerability has been found in DrayTek Vigor 2960 1.5.1.4 and
 CVE-2023-1162 (A vulnerability, which was classified as critical, was found in DrayTe ...)
 	NOT-FOR-US: DrayTek Vigor 2960
 CVE-2023-1161 (ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 an ...)
+	{DLA-3402-1}
 	[experimental] - wireshark 4.0.5-1~exp1
 	- wireshark <unfixed> (bug #1033756)
 	[bullseye] - wireshark <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f52e1fd015a90ba04f735e3d38aa30e18a04225c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f52e1fd015a90ba04f735e3d38aa30e18a04225c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230429/c3147556/attachment.htm>


More information about the debian-security-tracker-commits mailing list