[Git][security-tracker-team/security-tracker][master] Removed cinder from dla-needed since all CVEs are no-dsa.
Ola Lundqvist (@opal)
opal at debian.org
Sat Mar 9 22:33:04 GMT 2024
Ola Lundqvist pushed to branch master at Debian Security Tracker / security-tracker
Commits:
202d1034 by Ola Lundqvist at 2024-03-09T23:31:58+01:00
Removed cinder from dla-needed since all CVEs are no-dsa.
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -51955,12 +51955,16 @@ CVE-2023-2089 (A vulnerability was found in SourceCodester Complaint Management
CVE-2023-2088 (A flaw was found in OpenStack due to an inconsistency between Cinder a ...)
- cinder 2:21.1.0-3 (bug #1035961)
[bullseye] - cinder <no-dsa> (Minor issue)
+ [buster] - cinder <no-dsa> (Minor issue)
- python-glance-store 4.1.0-4 (bug #1035962; bug #1035978)
[bullseye] - python-glance-store <no-dsa> (Minor issue)
+ [buster] - python-glance-store <no-dsa> (Minor issue)
- nova 2:26.1.0-4 (bug #1035963; bug #1035981)
[bullseye] - nova <no-dsa> (Minor issue)
+ [buster] - nova <no-dsa> (Minor issue)
- python-os-brick 4.1.0-3 (bug #1035932)
[bullseye] - python-os-brick <no-dsa> (Minor issue)
+ [buster] - python-os-brick <no-dsa> (Minor issue)
NOTE: https://www.openwall.com/lists/oss-security/2023/05/10/5
NOTE: https://bugs.launchpad.net/nova/+bug/2004555
CVE-2023-2087 (The Essential Blocks plugin for WordPress is vulnerable to Cross-Site ...)
=====================================
data/dla-needed.txt
=====================================
@@ -51,10 +51,6 @@ cacti (Sylvain Beucler)
NOTE: 20240222: Reported incomplete fix upstream (Beuc)
NOTE: 20240227: Sent debdiffs for buster/bullseye/bookworm to maintainer+secteam; no news from upstream yet (Beuc)
--
-cinder
- NOTE: 20230525: Added by Front-Desk (lamby)
- NOTE: 20230525: NB. CVE-2023-2088 filed against python-glance-store, python-os-brick, nova and cinder.
---
composer (rouca)
NOTE: 20240209: Added by Front-Desk (utkarsh)
NOTE: 20240304: Need to backport bullseye
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/202d103430cac9b4648801cc626cd8a2af686cf2
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/202d103430cac9b4648801cc626cd8a2af686cf2
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240309/1a8c2fb5/attachment.htm>
More information about the debian-security-tracker-commits
mailing list