Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
2e2a853c by Salvatore Bonaccorso at 2023-02-15T22:23:24+01:00
Add Debian bug reference for CVE-2023-22490 and CVE-2023-23946

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5245,7 +5245,7 @@ CVE-2023-23948 (The ownCloud Android app allows ownCloud 
users to access, share,
 CVE-2023-23947
        RESERVED
 CVE-2023-23946 (Git, a revision control system, is vulnerable to path 
traversal prior  ...)
-       - git <unfixed>
+       - git <unfixed> (bug #1031310)
        NOTE: https://www.openwall.com/lists/oss-security/2023/02/14/5
        NOTE: 
https://github.com/git/git/commit/fade728df1221598f42d391cf377e9e84a32053f 
(v2.30.8)
 CVE-2023-23945
@@ -10015,7 +10015,7 @@ CVE-2023-22492 (ZITADEL is a combination of Auth0 and 
Keycloak. RefreshTokens is
 CVE-2023-22491 (Gatsby is a free and open source framework based on React that 
helps d ...)
        NOT-FOR-US: Gatsby
 CVE-2023-22490 (Git is a revision control system. Using a specially-crafted 
repository ...)
-       - git <unfixed>
+       - git <unfixed> (bug #1031310)
        NOTE: https://www.openwall.com/lists/oss-security/2023/02/14/5
        NOTE: 
https://github.com/git/git/commit/58325b93c5b6212697b088371809e9948fee8052 
(v2.30.8)
        NOTE: 
https://github.com/git/git/commit/cf8f6ce02a13f4d1979a53241afbee15a293fce9 
(v2.30.8)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2e2a853c6211d30310efc7142d24b00e5679cbd0

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2e2a853c6211d30310efc7142d24b00e5679cbd0
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to