Luca Boccassi pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
897c6306 by Luca Boccassi at 2022-12-22T11:35:54+01:00
CVE-2022-4415: mark as ignored for buster
Functionality is present in v241, but disabled by default (unlike in bullseye)
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3935,11 +3935,12 @@ CVE-2022-4415
RESERVED
- systemd <unfixed> (bug #1026831)
[bullseye] - systemd <no-dsa> (Minor issue; can be fixed via point
release)
- [buster] - systemd <not-affected> (Vulnerable code introduced later)
+ [buster] - systemd <ignored> (Optional feature; disabled by default)
NOTE: Preparation (main branch commit only):
https://github.com/systemd/systemd/commit/510a146634f3e095b34e2a26023b1b1f99dcb8c0
NOTE: Fixed by:
https://github.com/systemd/systemd/commit/3e4d0f6cf99f8677edd6a237382a65bfe758de03
NOTE: Fixed by:
https://github.com/systemd/systemd-stable/commit/bb47600aeb38c68c857fbf0ee5f66c3144dd81ce
(v247.13)
- NOTE: Affects only v246 and newer, and only if building with libacl
support
+ NOTE: Affects only v246 and newer (when acl support was enabled by
default), and only if building with libacl support
+ NOTE: Optional (disabled by default) faulty behaviour introduced by v215
NOTE: https://www.openwall.com/lists/oss-security/2022/12/21/3
CVE-2022-4414 (Cross-site Scripting (XSS) - DOM in GitHub repository
nuxt/framework p ...)
NOT-FOR-US: nuxt
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/897c630688684bf7f51676a1ecb43bf94e913cd3
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/897c630688684bf7f51676a1ecb43bf94e913cd3
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
