[Git][security-tracker-team/security-tracker][master] 3 commits: add chromium for another round
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Dec 13 08:40:38 GMT 2023
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
edc71e8f by Salvatore Bonaccorso at 2023-12-13T09:37:01+01:00
add chromium for another round
- - - - -
bba3c341 by Salvatore Bonaccorso at 2023-12-13T09:38:16+01:00
Add new chromium issues
- - - - -
8f05ddcc by Salvatore Bonaccorso at 2023-12-13T09:40:01+01:00
Track fixed version for chromium via unstable upload
- - - - -
2 changed files:
- data/CVE/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,21 @@
+CVE-2023-6707
+ - chromium 120.0.6099.109-1
+ [buster] - chromium <end-of-life> (see DSA 5046)
+CVE-2023-6706
+ - chromium 120.0.6099.109-1
+ [buster] - chromium <end-of-life> (see DSA 5046)
+CVE-2023-6705
+ - chromium 120.0.6099.109-1
+ [buster] - chromium <end-of-life> (see DSA 5046)
+CVE-2023-6704
+ - chromium 120.0.6099.109-1
+ [buster] - chromium <end-of-life> (see DSA 5046)
+CVE-2023-6703
+ - chromium 120.0.6099.109-1
+ [buster] - chromium <end-of-life> (see DSA 5046)
+CVE-2023-6702
+ - chromium 120.0.6099.109-1
+ [buster] - chromium <end-of-life> (see DSA 5046)
CVE-2023-6753 (Path Traversal in GitHub repository mlflow/mlflow prior to 2.9.2.)
NOT-FOR-US: mlflow
CVE-2023-50263 (Nautobot is a Network Source of Truth and Network Automation Platform ...)
=====================================
data/dsa-needed.txt
=====================================
@@ -14,6 +14,8 @@ If needed, specify the release by adding a slash after the name of the source pa
--
bluez (carnil)
--
+chromium (dilinger)
+--
cryptojs
--
dnsdist (jmm)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/55ec243473a55dbb459624128f15505590febbd9...8f05ddcccd21f11db25c389431af72135adc957b
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/55ec243473a55dbb459624128f15505590febbd9...8f05ddcccd21f11db25c389431af72135adc957b
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231213/c3cad823/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list