[Git][security-tracker-team/security-tracker][master] bugnums

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
59d04b1e by Moritz Muehlenhoff at 2023-10-27T18:26:57+02:00
bugnums

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -75,10 +75,10 @@ CVE-2023-39726 (An issue in Mintty v.3.6.4 and before allows a remote attacker t
 CVE-2023-38328 (An issue was discovered in eGroupWare 17.1.20190111. An Improper Passw ...)
 	- egroupware <removed>
 CVE-2023-34059 (open-vm-tools contains a file descriptor hijack vulnerability in the v ...)
-	- open-vm-tools <unfixed>
+	- open-vm-tools <unfixed> (bug #1054666)
 	NOTE: https://www.openwall.com/lists/oss-security/2023/10/27/3
 CVE-2023-34058 (VMware Tools contains a SAML token signature bypass vulnerability.A ma ...)
-	- open-vm-tools <unfixed>
+	- open-vm-tools <unfixed> (bug #1054666)
 	NOTE: https://www.openwall.com/lists/oss-security/2023/10/27/1
 	NOTE: https://github.com/vmware/open-vm-tools/blob/CVE-2023-34058.patch/CVE-2023-34058.patch
 CVE-2023-34057 (VMware Tools contains a local privilege escalation vulnerability.A mal ...)
@@ -161,7 +161,7 @@ CVE-2023-46435 (Sourcecodester Packers and Movers Management System v1.0 is vuln
 CVE-2023-46238 (ZITADEL is an identity infrastructure management system. ZITADEL users ...)
 	NOT-FOR-US: ZITADEL
 CVE-2023-46234 (browserify-sign is a package to duplicate the functionality of node's  ...)
-	- node-browserify-sign <unfixed>
+	- node-browserify-sign <unfixed> (bug #1054667)
 	NOTE: https://github.com/browserify/browserify-sign/security/advisories/GHSA-x9w5-v3q2-3rhw
 	NOTE: https://github.com/browserify/browserify-sign/commit/85994cd6348b50f2fd1b73c54e20881416f44a30
 CVE-2023-46094 (Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Conversi ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/59d04b1e269ad0f45309cb18904c59051eba589a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/59d04b1e269ad0f45309cb18904c59051eba589a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231027/bcc3f741/attachment.htm>