[Git][security-tracker-team/security-tracker][master] bookworm triage

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e8480ffa by Moritz Muehlenhoff at 2024-08-27T08:52:19+02:00
bookworm triage

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -104,6 +104,7 @@ CVE-2024-43806 (Rustix is a set of safe Rust bindings to POSIX-ish APIs. When us
 	TODO: check
 CVE-2024-43802 (Vim is an improved version of the unix vi text editor. When flushing t ...)
 	- vim <unfixed>
+	[bookworm] - vim <no-dsa> (Minor issue)
 	NOTE: https://github.com/vim/vim/security/advisories/GHSA-4ghr-c62x-cqfh
 	NOTE: https://github.com/vim/vim/commit/322ba9108612bead5eb7731ccb66763dec69ef1b (v9.1.0697)
 CVE-2024-43444 (Passwords of agents and customers are displayed in plain text in the O ...)
@@ -13344,7 +13345,7 @@ CVE-2024-29506 (Artifex Ghostscript before 10.03.0 has a stack-based buffer over
 CVE-2023-52169 (The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) conta ...)
 	- 7zip 24.05+dfsg-1 (unimportant)
 	NOTE: Crash in CLI tool, no security impact
-	- p7zip 16.02+transitional.1
+	- p7zip 16.02+transitional.1 (unimportant)
 	NOTE: https://sourceforge.net/p/sevenzip/bugs/2402/
 	NOTE: https://dfir.ru/2024/06/19/vulnerabilities-in-7-zip-and-ntfs3/
 	NOTE: https://www.openwall.com/lists/oss-security/2024/07/03/10
@@ -13354,6 +13355,7 @@ CVE-2023-52168 (The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz)
 	- 7zip 24.05+dfsg-1
 	[bookworm] - 7zip <no-dsa> (Minor issue)
 	- p7zip 16.02+transitional.1
+	[bookworm] - p7zip <no-dsa> (Minor issue)
 	NOTE: https://sourceforge.net/p/sevenzip/bugs/2402/
 	NOTE: https://dfir.ru/2024/06/19/vulnerabilities-in-7-zip-and-ntfs3/
 	NOTE: https://www.openwall.com/lists/oss-security/2024/07/03/10



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e8480ffaf10e92e82094f61d9dc0836ab4e85ab2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e8480ffaf10e92e82094f61d9dc0836ab4e85ab2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240827/6a097dd3/attachment.htm>