Sylvain Beucler pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
10ef6d47 by Sylvain Beucler at 2022-05-25T09:34:15+02:00
CVE-2022-21698/golang-github-prometheus-client-golang: stretch postponed
- - - - -
20db17ba by Sylvain Beucler at 2022-05-25T09:44:10+02:00
CVE-2022-30065/busybox: stretch postponed
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4156,6 +4156,7 @@ CVE-2022-30065 (A use-after-free in Busybox 1.35-x's awk
applet leads to denial
- busybox <unfixed>
[bullseye] - busybox <no-dsa> (Minor issue)
[buster] - busybox <no-dsa> (Minor issue)
+ [stretch] - busybox <postponed> (Minor issue, requires passing
arbitrary awk program, no identified patch)
NOTE: https://bugs.busybox.net/show_bug.cgi?id=14781
CVE-2022-30064
RESERVED
@@ -35819,6 +35820,7 @@ CVE-2022-21699 (IPython (Interactive Python) is a
command shell for interactive
NOTE:
https://ipython.readthedocs.io/en/stable/whatsnew/version8.html#ipython-8-0-1-cve-2022-21699
CVE-2022-21698 (client_golang is the instrumentation library for Go
applications in Pr ...)
- golang-github-prometheus-client-golang 1.11.1-1 (bug #1008008)
+ [stretch] - golang-github-prometheus-client-golang <postponed> (Minor
issue, DoS in specific conditions, requires rebuilding reverse-dependencies;
Limited support in stretch)
NOTE:
https://github.com/prometheus/client_golang/security/advisories/GHSA-cg3q-j54f-5p7p
NOTE: https://github.com/prometheus/client_golang/pull/962
NOTE: https://github.com/prometheus/client_golang/pull/987
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/aad31e881a8bd181f8dc7399e43631a6fcd65da6...20db17ba098e0018ada48673ed89550a7f049262
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/aad31e881a8bd181f8dc7399e43631a6fcd65da6...20db17ba098e0018ada48673ed89550a7f049262
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
