[Git][security-tracker-team/security-tracker][master] move kanboard spu entry, implicitly released along with the DSA

Moritz Muehlenhoff (@jmm) jmm at debian.org
Sun Jul 16 23:05:21 BST 2023



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e4b0f02e by Moritz Mühlenhoff at 2023-07-17T00:04:40+02:00
move kanboard spu entry, implicitly released along with the DSA

- - - - -


2 changed files:

- data/CVE/list
- data/next-point-update.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -5081,22 +5081,22 @@ CVE-2023-34097 (hoppscotch is an open source API development ecosystem. In versi
 	NOT-FOR-US: hoppscotch
 CVE-2023-33970 (Kanboard is open source project management software that focuses on th ...)
 	- kanboard 1.2.26+ds-4 (bug #1037167)
-	[bookworm] - kanboard <no-dsa> (Minor issue)
+	[bookworm] - kanboard 1.2.26+ds-2+deb12u1
 	NOTE: https://github.com/kanboard/kanboard/security/advisories/GHSA-wfch-8rhv-v286
 	NOTE: https://github.com/kanboard/kanboard/commit/b501ef44bc28ee9cf603a4fa446ee121d66f652f (v1.2.30)
 CVE-2023-33969 (Kanboard is open source project management software that focuses on th ...)
 	- kanboard 1.2.26+ds-4 (bug #1037167)
-	[bookworm] - kanboard <no-dsa> (Minor issue)
+	[bookworm] - kanboard 1.2.26+ds-2+deb12u1
 	NOTE: https://github.com/kanboard/kanboard/security/advisories/GHSA-8qvf-9847-gpc9
 	NOTE: https://github.com/kanboard/kanboard/commit/05f1d23d821152cd61536d3b09e522c0f7573e3c (v1.2.30)
 CVE-2023-33968 (Kanboard is open source project management software that focuses on th ...)
 	- kanboard 1.2.26+ds-4 (bug #1037167)
-	[bookworm] - kanboard <no-dsa> (Minor issue)
+	[bookworm] - kanboard 1.2.26+ds-2+deb12u1
 	NOTE: https://github.com/kanboard/kanboard/security/advisories/GHSA-gf8r-4p6m-v8vr
 	NOTE: https://github.com/kanboard/kanboard/commit/c20be8f5fa26e54005a90c645e80b11481a65053 (v1.2.30)
 CVE-2023-33956 (Kanboard is open source project management software that focuses on th ...)
 	- kanboard 1.2.26+ds-4 (bug #1037167)
-	[bookworm] - kanboard <no-dsa> (Minor issue)
+	[bookworm] - kanboard 1.2.26+ds-2+deb12u1
 	NOTE: https://github.com/kanboard/kanboard/security/advisories/GHSA-r36m-44gg-wxg2
 	NOTE: https://github.com/kanboard/kanboard/commit/437b141fa2267df36976814e704517f30d2424bd (v1.2.30)
 CVE-2023-33733 (Reportlab up to v3.6.12 allows attackers to execute arbitrary code via ...)
@@ -6291,7 +6291,7 @@ CVE-2023-32697 (SQLite JDBC is a library for accessing and creating SQLite datab
 	NOTE: Fixed by: https://github.com/xerial/sqlite-jdbc/commit/edb4b8adc2447bc04e05b9b908195a4bc7926242 (3.41.2.2)
 CVE-2023-32685 (Kanboard is project management software that focuses on the Kanban met ...)
 	- kanboard 1.2.26+ds-3 (bug #1036874)
-	[bookworm] - kanboard <no-dsa> (Minor issue)
+	[bookworm] - kanboard 1.2.26+ds-2+deb12u1
 	NOTE: https://github.com/kanboard/kanboard/security/advisories/GHSA-hjmw-gm82-r4gv
 CVE-2023-32681 (Requests is a HTTP library. Since Requests 2.3.0, Requests has been le ...)
 	{DLA-3456-1}


=====================================
data/next-point-update.txt
=====================================
@@ -8,16 +8,6 @@ CVE-2023-30570
 	[bookworm] - libreswan 4.10-2+deb12u1
 CVE-2023-34969
 	[bookworm] - dbus 1.14.8-1~deb12u1
-CVE-2023-33956
-	[bookworm] - kanboard 1.2.26+ds-2+deb12u1
-CVE-2023-33968
-	[bookworm] - kanboard 1.2.26+ds-2+deb12u1
-CVE-2023-33969
-	[bookworm] - kanboard 1.2.26+ds-2+deb12u1
-CVE-2023-33970
-	[bookworm] - kanboard 1.2.26+ds-2+deb12u1
-CVE-2023-32685
-	[bookworm] - kanboard 1.2.26+ds-2+deb12u1
 CVE-2023-32697
 	[bookworm] - xerial-sqlite-jdbc 3.40.1.0+dfsg-1+deb12u1
 CVE-2023-32668



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4b0f02ecf9411888d42ef95044497fa98337385

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4b0f02ecf9411888d42ef95044497fa98337385
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230716/4c8dec85/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list