[Git][security-tracker-team/security-tracker][master] bullseye/bookworm triage

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
252b4ef2 by Moritz Muehlenhoff at 2023-09-26T21:34:07+02:00
bullseye/bookworm triage

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -514,16 +514,28 @@ CVE-2023-43477 (The ping_from parameter of ping_tracerte.cgi in the web UI of Te
 	NOT-FOR-US: Telstra Smart Modem Gen 2 (Arcadyan LH1000) firmware
 CVE-2023-43377 (A cross-site scripting (XSS) vulnerability in /hoteldruid/visualizza_c ...)
 	- hoteldruid <unfixed> (bug #1052572)
+	[bookworm] - hoteldruid <no-dsa> (Minor issue)
+	[bullseye] - hoteldruid <no-dsa> (Minor issue)
 CVE-2023-43376 (A cross-site scripting (XSS) vulnerability in /hoteldruid/clienti.php  ...)
 	- hoteldruid <unfixed> (bug #1052572)
+	[bookworm] - hoteldruid <no-dsa> (Minor issue)
+	[bullseye] - hoteldruid <no-dsa> (Minor issue)
 CVE-2023-43375 (Hoteldruid v3.0.5 was discovered to contain multiple SQL injection vul ...)
 	- hoteldruid <unfixed> (bug #1052572)
+	[bookworm] - hoteldruid <no-dsa> (Minor issue)
+	[bullseye] - hoteldruid <no-dsa> (Minor issue)
 CVE-2023-43374 (Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerabil ...)
 	- hoteldruid <unfixed> (bug #1052572)
+	[bookworm] - hoteldruid <no-dsa> (Minor issue)
+	[bullseye] - hoteldruid <no-dsa> (Minor issue)
 CVE-2023-43373 (Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerabil ...)
 	- hoteldruid <unfixed> (bug #1052572)
+	[bookworm] - hoteldruid <no-dsa> (Minor issue)
+	[bullseye] - hoteldruid <no-dsa> (Minor issue)
 CVE-2023-43371 (Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerabil ...)
 	- hoteldruid <unfixed> (bug #1052572)
+	[bookworm] - hoteldruid <no-dsa> (Minor issue)
+	[bullseye] - hoteldruid <no-dsa> (Minor issue)
 CVE-2023-43207 (D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command  ...)
 	NOT-FOR-US: D-Link
 CVE-2023-43206 (D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command  ...)


=====================================
data/dsa-needed.txt
=====================================
@@ -23,6 +23,8 @@ firefox-esr (jmm)
 --
 gpac/oldstable (jmm)
 --
+jetty9
+--
 libreswan (jmm)
   Maintainer prepared bookworm-security update, but needs work on bullseye-security backports
 --
@@ -30,6 +32,8 @@ linux (carnil)
   Wait until more issues have piled up, though try to regulary rebase for point
   releases to more recent v5.10.y and 6.1.y versions
 --
+mosquitto
+--
 nbconvert/oldstable
   Guilhem Moulin proposed an update ready for review
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/252b4ef2ee10a12cb552e54ce10713cf33f54113

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/252b4ef2ee10a12cb552e54ce10713cf33f54113
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230926/d43c0091/attachment.htm>