[Git][security-tracker-team/security-tracker][master] new gradle issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5bdb7d6a by Moritz Muehlenhoff at 2023-10-06T09:17:29+02:00
new gradle issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -35,7 +35,11 @@ CVE-2023-44828 (D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer o
 CVE-2023-44390 (HtmlSanitizer is a .NET library for cleaning HTML fragments and docume ...)
 	NOT-FOR-US: HtmlSanitizer .NET library
 CVE-2023-44387 (Gradle is a build tool with a focus on build automation and support fo ...)
-	TODO: check
+	- gradle <unfixed>
+	[bookworm] - gradle <no-dsa> (Minor issue)
+	[bullseye] - gradle <no-dsa> (Minor issue)
+	NOTE: https://github.com/gradle/gradle/security/advisories/GHSA-43r3-pqhv-f7h9
+	NOTE: https://github.com/gradle/gradle/commit/3b406191e24d69e7e42dc3f3b5cc50625aa930b7
 CVE-2023-44386 (Vapor is an HTTP web framework for Swift. There is a denial of service ...)
 	NOT-FOR-US: Vapor
 CVE-2023-44024 (SQL injection vulnerability in KnowBand Module One Page Checkout, Soci ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5bdb7d6ab66a2b3d88c1fcea5a4b603f3d7a51da

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5bdb7d6ab66a2b3d88c1fcea5a4b603f3d7a51da
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231006/eb1e672a/attachment.htm>