[Git][security-tracker-team/security-tracker][master] 3 commits: DSA 5378-1: Sync date with advisory

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
389ead18 by Salvatore Bonaccorso at 2023-03-25T17:46:51+01:00
DSA 5378-1: Sync date with advisory

- - - - -
5e1026c7 by Salvatore Bonaccorso at 2023-03-25T17:56:00+01:00
Add Debian bug reference for CVE-2023-1370/json-smart

- - - - -
089f8785 by Salvatore Bonaccorso at 2023-03-25T17:58:40+01:00
Add Debian bug reference for CVE-2023-28708/tomcat9

- - - - -


2 changed files:

- data/CVE/list
- data/DSA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -469,7 +469,7 @@ CVE-2023-28709
 	RESERVED
 CVE-2023-28708 (When using the RemoteIpFilter with requests received from a reverse pr ...)
 	- tomcat10 10.1.6-1
-	- tomcat9 <unfixed>
+	- tomcat9 <unfixed> (bug #1033475)
 	- tomcat8 <removed>
 	NOTE: https://lists.apache.org/thread/hdksc59z3s7tm39x0pp33mtwdrt8qr67
 	NOTE: https://bz.apache.org/bugzilla/show_bug.cgi?id=66471
@@ -2255,7 +2255,7 @@ CVE-2023-1372 (The WH Testimonials plugin for WordPress is vulnerable to Stored
 CVE-2023-1371
 	RESERVED
 CVE-2023-1370 ([Json-smart](https://netplex.github.io/json-smart/) is a performance f ...)
-	- json-smart <unfixed>
+	- json-smart <unfixed> (bug #1033474)
 	[bullseye] - json-smart <no-dsa> (Minor issue)
 	NOTE: https://research.jfrog.com/vulnerabilities/stack-exhaustion-in-json-smart-leads-to-denial-of-service-when-parsing-malformed-json-xray-427633/
 	NOTE: https://github.com/netplex/json-smart-v2/commit/5b3205d051952d3100aa0db1535f6ba6226bd87a (2.4.9)


=====================================
data/DSA/list
=====================================
@@ -1,4 +1,4 @@
-[24 Mar 2023] DSA-5378-1 xen - security update
+[25 Mar 2023] DSA-5378-1 xen - security update
 	{CVE-2022-23824 CVE-2022-42331 CVE-2022-42332 CVE-2022-42333 CVE-2022-42334}
 	[bullseye] - xen 4.14.5+94-ge49571868d-1
 [23 Mar 2023] DSA-5377-1 chromium - security update



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/9580166958934a77aa25d9aa6226252f7d0f5a08...089f8785c09ebcd6f3a3a4a1a0428947226f8a7a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/9580166958934a77aa25d9aa6226252f7d0f5a08...089f8785c09ebcd6f3a3a4a1a0428947226f8a7a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230325/e74c0f3b/attachment-0001.htm>