[Git][security-tracker-team/security-tracker][master] move kanboard spu entry, implicitly released along with the DSA
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Sun Jul 16 23:05:21 BST 2023
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
e4b0f02e by Moritz Mühlenhoff at 2023-07-17T00:04:40+02:00
move kanboard spu entry, implicitly released along with the DSA
- - - - -
2 changed files:
- data/CVE/list
- data/next-point-update.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -5081,22 +5081,22 @@ CVE-2023-34097 (hoppscotch is an open source API development ecosystem. In versi
NOT-FOR-US: hoppscotch
CVE-2023-33970 (Kanboard is open source project management software that focuses on th ...)
- kanboard 1.2.26+ds-4 (bug #1037167)
- [bookworm] - kanboard <no-dsa> (Minor issue)
+ [bookworm] - kanboard 1.2.26+ds-2+deb12u1
NOTE: https://github.com/kanboard/kanboard/security/advisories/GHSA-wfch-8rhv-v286
NOTE: https://github.com/kanboard/kanboard/commit/b501ef44bc28ee9cf603a4fa446ee121d66f652f (v1.2.30)
CVE-2023-33969 (Kanboard is open source project management software that focuses on th ...)
- kanboard 1.2.26+ds-4 (bug #1037167)
- [bookworm] - kanboard <no-dsa> (Minor issue)
+ [bookworm] - kanboard 1.2.26+ds-2+deb12u1
NOTE: https://github.com/kanboard/kanboard/security/advisories/GHSA-8qvf-9847-gpc9
NOTE: https://github.com/kanboard/kanboard/commit/05f1d23d821152cd61536d3b09e522c0f7573e3c (v1.2.30)
CVE-2023-33968 (Kanboard is open source project management software that focuses on th ...)
- kanboard 1.2.26+ds-4 (bug #1037167)
- [bookworm] - kanboard <no-dsa> (Minor issue)
+ [bookworm] - kanboard 1.2.26+ds-2+deb12u1
NOTE: https://github.com/kanboard/kanboard/security/advisories/GHSA-gf8r-4p6m-v8vr
NOTE: https://github.com/kanboard/kanboard/commit/c20be8f5fa26e54005a90c645e80b11481a65053 (v1.2.30)
CVE-2023-33956 (Kanboard is open source project management software that focuses on th ...)
- kanboard 1.2.26+ds-4 (bug #1037167)
- [bookworm] - kanboard <no-dsa> (Minor issue)
+ [bookworm] - kanboard 1.2.26+ds-2+deb12u1
NOTE: https://github.com/kanboard/kanboard/security/advisories/GHSA-r36m-44gg-wxg2
NOTE: https://github.com/kanboard/kanboard/commit/437b141fa2267df36976814e704517f30d2424bd (v1.2.30)
CVE-2023-33733 (Reportlab up to v3.6.12 allows attackers to execute arbitrary code via ...)
@@ -6291,7 +6291,7 @@ CVE-2023-32697 (SQLite JDBC is a library for accessing and creating SQLite datab
NOTE: Fixed by: https://github.com/xerial/sqlite-jdbc/commit/edb4b8adc2447bc04e05b9b908195a4bc7926242 (3.41.2.2)
CVE-2023-32685 (Kanboard is project management software that focuses on the Kanban met ...)
- kanboard 1.2.26+ds-3 (bug #1036874)
- [bookworm] - kanboard <no-dsa> (Minor issue)
+ [bookworm] - kanboard 1.2.26+ds-2+deb12u1
NOTE: https://github.com/kanboard/kanboard/security/advisories/GHSA-hjmw-gm82-r4gv
CVE-2023-32681 (Requests is a HTTP library. Since Requests 2.3.0, Requests has been le ...)
{DLA-3456-1}
=====================================
data/next-point-update.txt
=====================================
@@ -8,16 +8,6 @@ CVE-2023-30570
[bookworm] - libreswan 4.10-2+deb12u1
CVE-2023-34969
[bookworm] - dbus 1.14.8-1~deb12u1
-CVE-2023-33956
- [bookworm] - kanboard 1.2.26+ds-2+deb12u1
-CVE-2023-33968
- [bookworm] - kanboard 1.2.26+ds-2+deb12u1
-CVE-2023-33969
- [bookworm] - kanboard 1.2.26+ds-2+deb12u1
-CVE-2023-33970
- [bookworm] - kanboard 1.2.26+ds-2+deb12u1
-CVE-2023-32685
- [bookworm] - kanboard 1.2.26+ds-2+deb12u1
CVE-2023-32697
[bookworm] - xerial-sqlite-jdbc 3.40.1.0+dfsg-1+deb12u1
CVE-2023-32668
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4b0f02ecf9411888d42ef95044497fa98337385
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4b0f02ecf9411888d42ef95044497fa98337385
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230716/4c8dec85/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list