summaryrefslogtreecommitdiffstats
path: root/data
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@debian.org>2024-03-15 15:46:34 +0100
committerGuilhem Moulin <guilhem@debian.org>2024-03-15 15:46:34 +0100
commitbc4c12fc42916abc7ae9c1b72d3be9a945f47e08 (patch)
tree42f531408cf78196bfc6279eb055c02a778035ca /data
parent61b65e49392c4f566c674e4da4b8a10227162082 (diff)
Reserve DLA-3761-1 for spip
Diffstat (limited to 'data')
-rw-r--r--data/CVE/list1
-rw-r--r--data/DLA/list3
-rw-r--r--data/dla-needed.txt4
3 files changed, 3 insertions, 5 deletions
diff --git a/data/CVE/list b/data/CVE/list
index c93a9c783b..a8bb4d3311 100644
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -17619,7 +17619,6 @@ CVE-2023-52322 (ecrire/public/assembler.php in SPIP before 4.1.13 and 4.2.x befo
- spip 4.1.13+dfsg-1 (bug #1059331)
[bookworm] - spip 4.1.9+dfsg-1+deb12u4
[bullseye] - spip 3.2.11-3+deb11u10
- [buster] - spip <no-dsa> (Minor issue)
NOTE: https://blog.spip.net/Mise-a-jour-de-maintenance-et-securite-sortie-de-SPIP-4-2-7-SPIP-4-1-13.html?lang=fr
NOTE: https://git.spip.net/spip/spip/commit/e90f5344b8c82711053053e778d38a35e42b7bcb
CVE-2023-7059 (A vulnerability was found in SourceCodester School Visitor Log e-Book ...)
diff --git a/data/DLA/list b/data/DLA/list
index fe5fc98938..f71e8960ee 100644
--- a/data/DLA/list
+++ b/data/DLA/list
@@ -1,3 +1,6 @@
+[15 Mar 2024] DLA-3761-1 spip - security update
+ {CVE-2023-52322}
+ [buster] - spip 3.2.4-1+deb10u13
[14 Mar 2024] DLA-3760-1 node-xml2js - security update
{CVE-2023-0842}
[buster] - node-xml2js 0.2.8-1.1+deb11u1~deb10u1
diff --git a/data/dla-needed.txt b/data/dla-needed.txt
index 48f807e70d..bbd2ac4057 100644
--- a/data/dla-needed.txt
+++ b/data/dla-needed.txt
@@ -272,10 +272,6 @@ sendmail
shim
NOTE: 20240306: Added by Front-Desk (opal)
--
-spip (guilhem)
- NOTE: 20240313: Added by Front-Desk (Beuc)
- NOTE: 20240313: Follow fix from bullseye 11.9 (CVE-2023-52322) (Beuc/front-desk)
---
squid
NOTE: 20240109: Added by Front-Desk (apo)
NOTE: 20240109: I ask for another pair of eyes for CVE-2023-5824. The fix

© 2014-2024 Faster IT GmbH | imprint | privacy policy