Merge ~federicoquattrin/ubuntu-cve-tracker:fixed_CVVE_2023_46233 into ubuntu-cve-tracker:master

[Federico Quattrin]

updated information for CVE-2023-46233

updated information for CVE-2023-46233

[Emilia Torino (emitorino)]

LGTM

review: Approve

diff --git a/active/CVE-2023-46233 b/active/CVE-2023-46233
index 095833f..a45b017 100644
--- a/active/CVE-2023-46233
+++ b/active/CVE-2023-46233
@@ -1,9 +1,11 @@
+PublicDateAtUSN: 2023-10-25 21:15:00 UTC
 Candidate: CVE-2023-46233
 PublicDate: 2023-10-25 21:15:00 UTC
 References:
  https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf
  https://github.com/brix/crypto-js/commit/421dd538b2d34e7c24a5b72cc64dc2b9167db40a
  https://www.cve.org/CVERecord?id=CVE-2023-46233
+ https://ubuntu.com/security/notices/USN-6753-1
 Description:
  crypto-js is a JavaScript library of crypto standards. Prior to version
  4.2.0, crypto-js PBKDF2 is 1,000 times weaker than originally specified in
@@ -22,21 +24,21 @@ Mitigation:
 Bugs:
 Priority: medium
 Discovered-by:
-Assigned-to: federicoquattrin
+Assigned-to:
 CVSS:
  nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N [9.1 CRITICAL]
 
 Patches_cryptojs:
-upstream_cryptojs: needs-triage
+upstream_cryptojs: released (4.2.0)
 trusty_cryptojs: ignored (end of standard support)
 xenial_cryptojs: ignored (end of standard support)
-esm-apps/xenial_cryptojs: needs-triage
+esm-apps/xenial_cryptojs: released (3.1.2+dfsg-2ubuntu0.16.04.1~esm1)
 bionic_cryptojs: ignored (end of standard support)
-esm-apps/bionic_cryptojs: needs-triage
-focal_cryptojs: needs-triage
-esm-apps/focal_cryptojs: needs-triage
-jammy_cryptojs: needs-triage
-esm-apps/jammy_cryptojs: needs-triage
+esm-apps/bionic_cryptojs: released (3.1.2+dfsg-2ubuntu0.18.04.1~esm1)
+focal_cryptojs: released (3.1.2+dfsg-2ubuntu0.20.04.1)
+esm-apps/focal_cryptojs: not-affected (3.1.2+dfsg-2ubuntu0.20.04.1)
+jammy_cryptojs: needed
+esm-apps/jammy_cryptojs: released (3.1.2+dfsg-3ubuntu0.22.04.1~esm1)
 lunar_cryptojs: ignored (end of life, was needs-triage)
-mantic_cryptojs: needs-triage
-devel_cryptojs: needs-triage
+mantic_cryptojs: needed
+devel_cryptojs: needed