[Git][security-tracker-team/security-tracker][master] 2 commits: Track proposed update for gnutls28 via bookworm-pu

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1e61ec30 by Salvatore Bonaccorso at 2024-01-20T15:56:46+01:00
Track proposed update for gnutls28 via bookworm-pu

- - - - -
f30f93b0 by Salvatore Bonaccorso at 2024-01-20T16:01:02+01:00
Update status for CVE-2024-0553 and CVE-2024-0567

- - - - -


2 changed files:

- data/CVE/list
- data/next-point-update.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -826,6 +826,8 @@ CVE-2024-0569 (A vulnerability classified as problematic has been found in Totol
 	NOT-FOR-US: Totolink
 CVE-2024-0567 (A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTL ...)
 	- gnutls28 3.8.3-1 (bug #1061045)
+	[bookworm] - gnutls28 <no-dsa> (Minor issue)
+	[bullseye] - gnutls28 <no-dsa> (Minor issue)
 	NOTE: https://gitlab.com/gnutls/gnutls/-/issues/1521
 	NOTE: https://gnutls.org/security-new.html#GNUTLS-SA-2024-01-09
 	NOTE: https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html
@@ -838,6 +840,8 @@ CVE-2024-0554 (A Cross-site scripting (XSS) vulnerability has been found on WIC1
 	NOT-FOR-US: WIC200
 CVE-2024-0553 (A vulnerability was found in GnuTLS. The response times to malformed c ...)
 	- gnutls28 3.8.3-1 (bug #1061046)
+	[bookworm] - gnutls28 <no-dsa> (Minor issue)
+	[bullseye] - gnutls28 <not-affected> (Incomplete fix for CVE-2023-5981 not published officially in any Debian bullseye release)
 	NOTE: https://gitlab.com/gnutls/gnutls/-/issues/1522
 	NOTE: https://gnutls.org/security-new.html#GNUTLS-SA-2024-01-14
 	NOTE: https://gitlab.com/gnutls/gnutls/-/commit/40dbbd8de499668590e8af51a15799fbc430595e (3.8.3)


=====================================
data/next-point-update.txt
=====================================
@@ -92,3 +92,7 @@ CVE-2022-48303
 	[bookworm] - tar 1.34+dfsg-1.2+deb12u1
 CVE-2023-39804
 	[bookworm] - tar 1.34+dfsg-1.2+deb12u1
+CVE-2024-0567
+	[bookworm] - gnutls28 3.7.9-2+deb12u2
+CVE-2024-0553
+	[bookworm] - gnutls28 3.7.9-2+deb12u2



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/a6b3131869904b7dc429e1057752eb20728d4376...f30f93b036b864eb245daf7dec5f70a824a7fb5c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/a6b3131869904b7dc429e1057752eb20728d4376...f30f93b036b864eb245daf7dec5f70a824a7fb5c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240120/1cb4dbad/attachment-0001.htm>