[Git][security-tracker-team/security-tracker][master] 2 commits: Triage CVE-2021-46310 & CVE-2021-46312 in djvulibre for buster LTS.

[Chris Lamb (@lamby)]

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
dacff47d by Chris Lamb at 2023-09-08T13:24:15-07:00
Triage CVE-2021-46310 & CVE-2021-46312 in djvulibre for buster LTS.

- - - - -
6cefff8b by Chris Lamb at 2023-09-08T13:24:16-07:00
Triage CVE-2023-40184 in xrdp for buster LTS.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1370,6 +1370,7 @@ CVE-2023-40184 (xrdp is an open source remote desktop protocol (RDP) server. In
 	- xrdp <unfixed> (bug #1051061)
 	[bookworm] - xrdp <no-dsa> (Minor issue)
 	[bullseye] - xrdp <no-dsa> (Minor issue)
+	[buster] - xrdp <no-dsa> (Minor issue)
 	NOTE: https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-f489-557v-47jq
 	NOTE: https://github.com/neutrinolabs/xrdp/commit/25a1fab5b6c5ef2a8bb109232b765cb8b332ce5e
 CVE-2023-40181 (FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), ...)
@@ -120105,6 +120106,7 @@ CVE-2021-46312 (An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28
 	- djvulibre <unfixed>
 	[bookworm] - djvulibre <no-dsa> (Minor issue)
 	[bullseye] - djvulibre <no-dsa> (Minor issue)
+	[buster] - djvulibre <no-dsa> (Minor issue)
 	NOTE: https://sourceforge.net/p/djvu/bugs/344/
 CVE-2021-46311 (A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the ...)
 	- gpac 2.0.0+dfsg1-2
@@ -120117,6 +120119,7 @@ CVE-2021-46310 (An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in all
 	- djvulibre <unfixed>
 	[bookworm] - djvulibre <no-dsa> (Minor issue)
 	[bullseye] - djvulibre <no-dsa> (Minor issue)
+	[buster] - djvulibre <no-dsa> (Minor issue)
 	NOTE: https://sourceforge.net/p/djvu/bugs/345/
 CVE-2021-46309 (An SQL Injection vulnerability exists in Sourcecodester Employee and V ...)
 	NOT-FOR-US: Sourcecodester



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/71a110bf3a282a4f20e90442f230a20b5c747fe5...6cefff8b5e623f25029c69d9d6155a68585c3c44

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/71a110bf3a282a4f20e90442f230a20b5c747fe5...6cefff8b5e623f25029c69d9d6155a68585c3c44
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230908/b4220f7b/attachment.htm>