[Git][security-tracker-team/security-tracker][master] bullseye triage

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ae967725 by Moritz Muehlenhoff at 2023-05-17T16:26:56+02:00
bullseye triage

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -173,40 +173,64 @@ CVE-2023-31842 (Sourcecodester Faculty Evaluation System v1.0 is vulnerable to S
 	NOT-FOR-US: Sourcecodester Faculty Evaluation System
 CVE-2023-31631 (An issue in the sqlo_preds_contradiction component of openlink virtuos ...)
 	- virtuoso-opensource <unfixed>
+	[bullseye] - virtuoso-opensource <no-dsa> (Minor issue)
 	NOTE: https://github.com/openlink/virtuoso-opensource/issues/1137
+	NOTE: https://github.com/openlink/virtuoso-opensource/commit/c77cd981a82a7f6385b174eb818057b2f19d8c09
 CVE-2023-31630 (An issue in the sqlo_query_spec component of openlink virtuoso-opensou ...)
 	- virtuoso-opensource <unfixed>
+	[bullseye] - virtuoso-opensource <no-dsa> (Minor issue)
 	NOTE: https://github.com/openlink/virtuoso-opensource/issues/1138
+	NOTE: https://github.com/openlink/virtuoso-opensource/commit/f9244141ce68dc4a3314fd4a0cd5bb3bdd6ab830
 CVE-2023-31629 (An issue in the sqlo_union_scope component of openlink virtuoso-openso ...)
 	- virtuoso-opensource <unfixed>
+	[bullseye] - virtuoso-opensource <no-dsa> (Minor issue)
 	NOTE: https://github.com/openlink/virtuoso-opensource/issues/1139
+	NOTE: https://github.com/openlink/virtuoso-opensource/commit/9553f94992f0a33f7eb7e87e74f0f78998ba5bec
 CVE-2023-31628 (An issue in the stricmp component of openlink virtuoso-opensource v7.2 ...)
 	- virtuoso-opensource <unfixed>
+	[bullseye] - virtuoso-opensource <no-dsa> (Minor issue)
 	NOTE: https://github.com/openlink/virtuoso-opensource/issues/1141
+	NOTE: https://github.com/openlink/virtuoso-opensource/commit/2ed10333e6e973c2b3e1e60ba854ef0dd12afe07
 CVE-2023-31627 (An issue in the strhash component of openlink virtuoso-opensource v7.2 ...)
 	- virtuoso-opensource <unfixed>
+	[bullseye] - virtuoso-opensource <no-dsa> (Minor issue)
 	NOTE: https://github.com/openlink/virtuoso-opensource/issues/1140
+	NOTE: https://github.com/openlink/virtuoso-opensource/commit/ce61d6f568568b771d7e857408e3246d31135494
 CVE-2023-31626 (An issue in the gpf_notice component of openlink virtuoso-opensource v ...)
 	- virtuoso-opensource <unfixed>
+	[bullseye] - virtuoso-opensource <no-dsa> (Minor issue)
 	NOTE: https://github.com/openlink/virtuoso-opensource/issues/1129
+	NOTE: https://github.com/openlink/virtuoso-opensource/commit/2ed10333e6e973c2b3e1e60ba854ef0dd12afe07
 CVE-2023-31625 (An issue in the psiginfo component of openlink virtuoso-opensource v7. ...)
 	- virtuoso-opensource <unfixed>
+	[bullseye] - virtuoso-opensource <no-dsa> (Minor issue)
 	NOTE: https://github.com/openlink/virtuoso-opensource/issues/1132
+	NOTE: https://github.com/openlink/virtuoso-opensource/commit/2ed10333e6e973c2b3e1e60ba854ef0dd12afe07
 CVE-2023-31624 (An issue in the sinv_check_exp component of openlink virtuoso-opensour ...)
 	- virtuoso-opensource <unfixed>
+	[bullseye] - virtuoso-opensource <no-dsa> (Minor issue)
 	NOTE: https://github.com/openlink/virtuoso-opensource/issues/1134
+	NOTE: https://github.com/openlink/virtuoso-opensource/commit/311097fb1f23d0a1dd7dcdd2afecf6fe14665526
 CVE-2023-31623 (An issue in the mp_box_copy component of openlink virtuoso-opensource  ...)
 	- virtuoso-opensource <unfixed>
+	[bullseye] - virtuoso-opensource <no-dsa> (Minor issue)
 	NOTE: https://github.com/openlink/virtuoso-opensource/issues/1131
+	NOTE: https://github.com/openlink/virtuoso-opensource/commit/2ed10333e6e973c2b3e1e60ba854ef0dd12afe07
 CVE-2023-31622 (An issue in the sqlc_make_policy_trig component of openlink virtuoso-o ...)
 	- virtuoso-opensource <unfixed>
+	[bullseye] - virtuoso-opensource <no-dsa> (Minor issue)
 	NOTE: https://github.com/openlink/virtuoso-opensource/issues/1135
+	NOTE: https://github.com/openlink/virtuoso-opensource/commit/db91dc5602a8cfde2e4e1d00387d5ba4b77389dc
 CVE-2023-31621 (An issue in the kc_var_col component of openlink virtuoso-opensource v ...)
 	- virtuoso-opensource <unfixed>
+	[bullseye] - virtuoso-opensource <no-dsa> (Minor issue)
 	NOTE: https://github.com/openlink/virtuoso-opensource/issues/1130
+	NOTE: https://github.com/openlink/virtuoso-opensource/commit/ec54f1c7b50df944ae4a8d3e29cd7eaf1cc97b21
 CVE-2023-31620 (An issue in the dv_compare component of openlink virtuoso-opensource v ...)
 	- virtuoso-opensource <unfixed>
+	[bullseye] - virtuoso-opensource <no-dsa> (Minor issue)
 	NOTE: https://github.com/openlink/virtuoso-opensource/issues/1128
+	NOTE: https://github.com/openlink/virtuoso-opensource/commit/a4997ed2499c4de8c95e2de9e2a07b60384fbbec
 CVE-2023-31619 (An issue in the sch_name_to_object component of openlink virtuoso-open ...)
 	- virtuoso-opensource <unfixed>
 	NOTE: https://github.com/openlink/virtuoso-opensource/issues/1133


=====================================
data/dsa-needed.txt
=====================================
@@ -14,6 +14,8 @@ If needed, specify the release by adding a slash after the name of the source pa
 --
 asterisk
 --
+curl
+--
 chromium
 --
 gpac (aron)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae9677257b96910335365b4cb88197135d67bf8f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae9677257b96910335365b4cb88197135d67bf8f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230517/77e5eda1/attachment-0001.htm>