[Git][security-tracker-team/security-tracker][master] automatic update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4711f028 by security tracker role at 2023-08-29T08:14:06+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,4 +1,46 @@
-CVE-2023-4569 [information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c]
+CVE-2023-41363 (In Cerebrate 1.14, a vulnerability in UserSettingsController allows au ...)
+	TODO: check
+CVE-2023-41361 (An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not ...)
+	TODO: check
+CVE-2023-41360 (An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet. ...)
+	TODO: check
+CVE-2023-41359 (An issue was discovered in FRRouting FRR through 9.0. There is an out- ...)
+	TODO: check
+CVE-2023-41358 (An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet. ...)
+	TODO: check
+CVE-2023-41005 (An issue in Pagekit pagekit v.1.0.18 alows a remote attacker to execut ...)
+	TODO: check
+CVE-2023-40998 (Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib- ...)
+	TODO: check
+CVE-2023-40997 (Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib- ...)
+	TODO: check
+CVE-2023-40857 (Buffer Overflow vulnerability in VirusTotal yara v.4.3.2 allows a remo ...)
+	TODO: check
+CVE-2023-40828 (An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to o ...)
+	TODO: check
+CVE-2023-40827 (An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to o ...)
+	TODO: check
+CVE-2023-40826 (An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to o ...)
+	TODO: check
+CVE-2023-40825 (An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to ex ...)
+	TODO: check
+CVE-2023-40781 (Buffer Overflow vulnerability in Libming Libming v.0.4.8 allows a remo ...)
+	TODO: check
+CVE-2023-39968 (jupyter-server is the backend for Jupyter web applications. Open Redir ...)
+	TODO: check
+CVE-2023-39650 (Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a  ...)
+	TODO: check
+CVE-2023-39059 (An issue in ansible semaphore v.2.8.90 allows a remote attacker to exe ...)
+	TODO: check
+CVE-2023-38969 (Cross Site Scripting vulnerabiltiy in Badaso v.2.9.7 allows a remote a ...)
+	TODO: check
+CVE-2023-34725 (An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19_T5 ...)
+	TODO: check
+CVE-2023-34724 (An issue was discovered in TECHView LA5570 Wireless Gateway 1.0.19_T53 ...)
+	TODO: check
+CVE-2023-32457 (Dell PowerScale OneFS, versions 8.2.2.x-9.5.0.x, contains an improper  ...)
+	TODO: check
+CVE-2023-4569 (A memory leak flaw was found in nft_set_catchall_flush in net/netfilte ...)
 	- linux <unfixed>
 	NOTE: https://git.kernel.org/linus/90e5b3462efa37b8bba82d7c4e63683856e188af (6.5-rc7)
 CVE-2023-4563 [Use-after-free in nft_verdict_dump due to a race between set GC and transaction]
@@ -16158,8 +16200,8 @@ CVE-2023-1998 (The Linux kernel allows userspace processes to enable mitigations
 	[bullseye] - linux 5.10.178-1
 	NOTE: https://git.kernel.org/linus/6921ed9049bc7457f66c1596c5b78aec0dae4a9d (6.3-rc1)
 	NOTE: https://kernel.dance/#6921ed9049bc7457f66c1596c5b78aec0dae4a9d
-CVE-2023-1995
-	RESERVED
+CVE-2023-1995 (Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Serv ...)
+	TODO: check
 CVE-2023-1994 (GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12  ...)
 	{DSA-5429-1 DLA-3402-1}
 	[experimental] - wireshark 4.0.5-1~exp1
@@ -215713,8 +215755,8 @@ CVE-2020-24167
 	RESERVED
 CVE-2020-24166
 	RESERVED
-CVE-2020-24165
-	RESERVED
+CVE-2020-24165 (An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local ...)
+	TODO: check
 CVE-2020-24164 (A deserialization flaw is present in Taoensso Nippy before 2.14.2. In  ...)
 	NOT-FOR-US: Taoensso Nippy
 CVE-2020-24163



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4711f02843be38d738c1de82f1693e363e436d0f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4711f02843be38d738c1de82f1693e363e436d0f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230829/27c8f634/attachment.htm>