[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2023-48104/sogo via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Feb 9 21:16:02 GMT 2024
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
b4bd1a61 by Salvatore Bonaccorso at 2024-02-09T22:15:24+01:00
Track fixed version for CVE-2023-48104/sogo via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4894,7 +4894,7 @@ CVE-2023-49107 (Generation of Error Message Containing Sensitive Information vul
CVE-2023-49106 (Missing Password Field Masking vulnerability in Hitachi Device Manager ...)
NOT-FOR-US: Hitachi
CVE-2023-48104 (Alinto SOGo before 5.9.1 is vulnerable to HTML Injection.)
- - sogo <unfixed> (bug #1060925)
+ - sogo 5.9.1-1 (bug #1060925)
[buster] - sogo <ignored> (Minor issue)
NOTE: Fixed by: https://github.com/Alinto/sogo/commit/7481ccf37087c3f456d7e5a844da01d0f8883098 (SOGo-5.9.1)
CVE-2023-47460 (SQL injection vulnerability in Knovos Discovery v.22.67.0 allows a rem ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b4bd1a619a81a31ef7df907feab1fb843bb33d85
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b4bd1a619a81a31ef7df907feab1fb843bb33d85
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240209/ed153014/attachment.htm>
More information about the debian-security-tracker-commits
mailing list