[Git][security-tracker-team/security-tracker][master] bookworm triage

Moritz Muehlenhoff (@jmm) jmm at debian.org
Thu Mar 2 21:51:00 GMT 2023



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5601a142 by Moritz Muehlenhoff at 2023-03-02T22:50:41+01:00
bookworm triage

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -18171,6 +18171,8 @@ CVE-2022-4544 (The MashShare WordPress plugin before 3.8.7 does not validate and
 	NOT-FOR-US: WordPress plugin
 CVE-2022-4543 (A flaw named "EntryBleed" was found in the Linux Kernel Page Table Iso ...)
 	- linux <unfixed>
+	[bookworm] - linux <postponed> (Minor issue, revisit when/if fixed upstream)
+	[bullseye] - linux <postponed> (Minor issue, revisit when/if fixed upstream)
 	NOTE: https://www.openwall.com/lists/oss-security/2022/12/16/3
 	NOTE: https://www.willsroot.io/2022/12/entrybleed.html
 CVE-2023-0016 (SAP BPC MS 10.0 - version 810, allows an unauthorized attacker to exec ...)
@@ -172448,31 +172450,31 @@ CVE-2020-26235 (In Rust time crate from version 0.2.7 and before version 0.2.23,
 	NOTE: Introduced by: https://github.com/time-rs/time/commit/5f1c4927124fefbd8d2886f83a574beb381411e9 (v0.2.7)
 	NOTE: Deprecated in: https://github.com/time-rs/time/commit/f153a1ca5fdfec979f16c49619e6034cc67e186d (v0.2.23)
 CVE-2020-35914 (An issue was discovered in the lock_api crate before 0.4.2 for Rust. A ...)
-	- rust-lock-api <unfixed> (bug #975319)
+	- rust-lock-api 0.4.5-1 (bug #975319)
 	[bullseye] - rust-lock-api <no-dsa> (Minor issue)
 	[buster] - rust-lock-api <no-dsa> (Minor issue)
 	NOTE: https://rustsec.org/advisories/RUSTSEC-2020-0070.html
 	NOTE: https://github.com/Amanieu/parking_lot/pull/262
 CVE-2020-35913 (An issue was discovered in the lock_api crate before 0.4.2 for Rust. A ...)
-	- rust-lock-api <unfixed> (bug #975319)
+	- rust-lock-api 0.4.5-1 (bug #975319)
 	[bullseye] - rust-lock-api <no-dsa> (Minor issue)
 	[buster] - rust-lock-api <no-dsa> (Minor issue)
 	NOTE: https://rustsec.org/advisories/RUSTSEC-2020-0070.html
 	NOTE: https://github.com/Amanieu/parking_lot/pull/262
 CVE-2020-35912 (An issue was discovered in the lock_api crate before 0.4.2 for Rust. A ...)
-	- rust-lock-api <unfixed> (bug #975319)
+	- rust-lock-api 0.4.5-1 (bug #975319)
 	[bullseye] - rust-lock-api <no-dsa> (Minor issue)
 	[buster] - rust-lock-api <no-dsa> (Minor issue)
 	NOTE: https://rustsec.org/advisories/RUSTSEC-2020-0070.html
 	NOTE: https://github.com/Amanieu/parking_lot/pull/262
 CVE-2020-35911 (An issue was discovered in the lock_api crate before 0.4.2 for Rust. A ...)
-	- rust-lock-api <unfixed> (bug #975319)
+	- rust-lock-api 0.4.5-1 (bug #975319)
 	[bullseye] - rust-lock-api <no-dsa> (Minor issue)
 	[buster] - rust-lock-api <no-dsa> (Minor issue)
 	NOTE: https://rustsec.org/advisories/RUSTSEC-2020-0070.html
 	NOTE: https://github.com/Amanieu/parking_lot/pull/262
 CVE-2020-35910 (An issue was discovered in the lock_api crate before 0.4.2 for Rust. A ...)
-	- rust-lock-api <unfixed> (bug #975319)
+	- rust-lock-api 0.4.5-1 (bug #975319)
 	[bullseye] - rust-lock-api <no-dsa> (Minor issue)
 	[buster] - rust-lock-api <no-dsa> (Minor issue)
 	NOTE: https://rustsec.org/advisories/RUSTSEC-2020-0070.html



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5601a14217efce3be87dd9761165abfc1bd9a039

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5601a14217efce3be87dd9761165abfc1bd9a039
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230302/247d7004/attachment.htm>


More information about the debian-security-tracker-commits mailing list