[Git][security-tracker-team/security-tracker][master] bullseye triage

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4c023ff2 by Moritz Muehlenhoff at 2023-01-23T11:18:33+01:00
bullseye triage

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -632,32 +632,39 @@ CVE-2022-48280
 	RESERVED
 CVE-2023-XXXX [wnpa-sec-2023-07: TIPC dissector crash]
 	- wireshark 4.0.3-1
+	[bullseye] - wireshark <postponed> (Minor issue, fix along in future update)
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2023-07.html
 	NOTE: https://gitlab.com/wireshark/wireshark/-/issues/18770
 CVE-2023-XXXX [wnpa-sec-2023-06: Multiple dissector excessive loops]
 	- wireshark 4.0.3-1
+	[bullseye] - wireshark <postponed> (Minor issue, fix along in future update)
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2023-06.html
 	NOTE: https://gitlab.com/wireshark/wireshark/-/issues/18711
 	NOTE: https://gitlab.com/wireshark/wireshark/-/issues/18720
 	NOTE: https://gitlab.com/wireshark/wireshark/-/issues/18737
 CVE-2023-XXXX [wnpa-sec-2023-05: iSCSI dissector crash]
 	- wireshark 4.0.3-1
+	[bullseye] - wireshark <postponed> (Minor issue, fix along in future update)
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2023-05.html
 	NOTE: https://gitlab.com/wireshark/wireshark/-/issues/18796
 CVE-2023-XXXX [wnpa-sec-2023-04: GNW dissector crash]
 	- wireshark 4.0.3-1
+	[bullseye] - wireshark <postponed> (Minor issue, fix along in future update)
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2023-04.html
 	NOTE: https://gitlab.com/wireshark/wireshark/-/issues/18779
 CVE-2023-XXXX [wnpa-sec-2023-03: Dissection engine crash]
 	- wireshark 4.0.3-1
+	[bullseye] - wireshark <postponed> (Minor issue, fix along in future update)
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2023-03.html
 	NOTE: https://gitlab.com/wireshark/wireshark/-/issues/18766
 CVE-2023-XXXX [wnpa-sec-2023-02: NFS dissector memory leak]
 	- wireshark 4.0.3-1
+	[bullseye] - wireshark <postponed> (Minor issue, fix along in future update)
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2023-02.html
 	NOTE: https://gitlab.com/wireshark/wireshark/-/issues/18628
 CVE-2023-XXXX [wnpa-sec-2023-01: EAP dissector crash]
 	- wireshark 4.0.3-1
+	[bullseye] - wireshark <postponed> (Minor issue, fix along in future update)
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2023-01.html
 	NOTE: https://gitlab.com/wireshark/wireshark/-/issues/18622
 CVE-2023-24059 (Grand Theft Auto V for PC allows attackers to achieve partial remote c ...)
@@ -677,9 +684,10 @@ CVE-2023-0434 (Improper Input Validation in GitHub repository pyload/pyload prio
 CVE-2023-24054
 	RESERVED
 CVE-2023-0433 (Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1 ...)
-	- vim <unfixed>
+	- vim <unfixed> (unimportant)
 	NOTE: https://huntr.dev/bounties/ae933869-a1ec-402a-bbea-d51764c6618e/
 	NOTE: https://github.com/vim/vim/commit/11977f917506d950b7e0cae558bd9189260b253b (v9.0.1225)
+	NOTE: Crash in CLI tool, no security impact
 CVE-2023-24053
 	RESERVED
 CVE-2023-24052
@@ -4591,6 +4599,7 @@ CVE-2023-22746
 	RESERVED
 CVE-2023-22745 (tpm2-tss is an open source software implementation of the Trusted Comp ...)
 	- tpm2-tss <unfixed> (bug #1029369)
+	[bullseye] - tpm2-tss <no-dsa> (Minor issue)
 	NOTE: Fixed by: https://github.com/tpm2-software/tpm2-tss/commit/306490c8d848c367faa2d9df81f5e69dab46ffb5
 	NOTE: https://github.com/tpm2-software/tpm2-tss/security/advisories/GHSA-4j3v-fh23-vx67
 CVE-2023-22744



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4c023ff2561f93e8ebcc48651fcda6fa15803434

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4c023ff2561f93e8ebcc48651fcda6fa15803434
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230123/54ae3522/attachment.htm>