[Git][security-tracker-team/security-tracker][master] bullseye/bookworm triage

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
93c25739 by Moritz Muehlenhoff at 2024-02-23T23:29:45+01:00
bullseye/bookworm triage

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -23267,8 +23267,8 @@ CVE-2023-39333
 	NOTE: https://github.com/nodejs/node/commit/eaf9083cf1e43bd897ac8244dcc0f4e3500150ca
 CVE-2023-5388
 	- nss 2:3.98-1 (bug #1056284)
-	[bookworm] - nss <postponed> (Minor issue, revisit once fixed upstream)
-	[bullseye] - nss <postponed> (Minor issue, revisit once fixed upstream)
+	[bookworm] - nss <no-dsa> (Minor issue)
+	[bullseye] - nss <no-dsa> (Minor issue)
 	[buster] - nss <no-dsa> (Minor issue)
 	NOTE: https://people.redhat.com/~hkario/marvin/
 	NOTE: Vendor patch (Rocky Linux, not upstreamed): https://git.rockylinux.org/staging/rpms/nss/-/commit/1f7f7523b61a2ada2f461548c4160fbbf979c5dd
@@ -53132,6 +53132,8 @@ CVE-2023-28658 (Insecure inherited permissions in some Intel(R) oneMKL software
 	NOT-FOR-US: Intel
 CVE-2023-27517 (Improper access control in some Intel(R) Optane(TM) PMem software befo ...)
 	- ipmctl 03.00.00.0485-1
+	[bookworm] - ipmctl <no-dsa> (Minor issue)
+	[bullseye] - ipmctl <no-dsa> (Minor issue)
 	NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html
 	TODO: full details not clear but affects the "Intel Optane Pmem {1,2,3}00Series management software (ipmctl)
 CVE-2023-26589 (Use after free in some Intel(R) Aptio* V UEFI Firmware Integrator Tool ...)


=====================================
data/dsa-needed.txt
=====================================
@@ -51,7 +51,7 @@ nodejs
 --
 opennds/stable
 --
-openvswitch
+openvswitch (jmm)
   Maintainer sent debdiff for CVE-2023-3966, but there are other CVE fixes which might be piggy backed.
 --
 php-cas/oldstable



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/93c25739ec8a8fad68f86a760ba5b4531e237c26

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/93c25739ec8a8fad68f86a760ba5b4531e237c26
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240223/16c81d46/attachment.htm>