[Git][security-tracker-team/security-tracker][master] new jetty issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e23b8bdd by Moritz Muehlenhoff at 2023-09-26T21:55:20+02:00
new jetty issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1145,7 +1145,9 @@ CVE-2023-36658 (An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996.
 CVE-2023-36657 (An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Built ...)
 	NOT-FOR-US: OPSWAT MetaDefender KIOSK
 CVE-2023-36479 (Eclipse Jetty Canonical Repository is the canonical repository for the ...)
-	TODO: check
+	- jetty9 <unfixed>
+	NOTE: https://github.com/eclipse/jetty.project/security/advisories/GHSA-3gh6-v5v9-6v9j
+	NOTE: https://github.com/eclipse/jetty.project/pull/9888
 CVE-2023-36472 (Strapi is an open-source headless content management system. Prior to  ...)
 	NOT-FOR-US: Strapi
 CVE-2023-32461 (Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e23b8bdd3b0499b869a25a8756c53695d41d5d28

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e23b8bdd3b0499b869a25a8756c53695d41d5d28
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230926/38836aa2/attachment.htm>