[Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2023-5388/nss

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d32e1d57 by Salvatore Bonaccorso at 2024-02-21T07:12:26+01:00
Track fixed version via unstable for CVE-2023-5388/nss

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -22376,13 +22376,13 @@ CVE-2023-39333
 	NOTE: https://nodejs.org/en/blog/vulnerability/october-2023-security-releases#code-injection-via-webassembly-export-names-low---cve-2023-39333
 	NOTE: https://github.com/nodejs/node/commit/eaf9083cf1e43bd897ac8244dcc0f4e3500150ca
 CVE-2023-5388
-	- nss <unfixed> (bug #1056284)
+	- nss 2:3.98-1 (bug #1056284)
 	[bookworm] - nss <postponed> (Minor issue, revisit once fixed upstream)
 	[bullseye] - nss <postponed> (Minor issue, revisit once fixed upstream)
 	[buster] - nss <no-dsa> (Minor issue)
 	NOTE: https://people.redhat.com/~hkario/marvin/
 	NOTE: Vendor patch (Rocky Linux, not upstreamed): https://git.rockylinux.org/staging/rpms/nss/-/commit/1f7f7523b61a2ada2f461548c4160fbbf979c5dd
-	NOTE: Upstream patch: https://hg.mozilla.org/projects/nss/rev/196716d8377ab427e326f20bff2d026e90ac69e2
+	NOTE: Fixed by: https://hg.mozilla.org/projects/nss/rev/196716d8377ab427e326f20bff2d026e90ac69e2
 CVE-2023-5551 (Separate Groups mode restrictions were not honoured in the forum summa ...)
 	- moodle <removed>
 CVE-2023-5550 (In a shared hosting environment that has been misconfigured to allow a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d32e1d57904b96f852693dfb2cf76ccdabcd5886

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d32e1d57904b96f852693dfb2cf76ccdabcd5886
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240221/6371cf9c/attachment.htm>