Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9453111a by Salvatore Bonaccorso at 2023-06-29T08:41:45+02:00
Add CVE-2023-3354/qemu
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -83,6 +83,10 @@ CVE-2023-3355 [drm/msm/gem: Add check for kmalloc]
[bullseye] - linux <not-affected> (Vulnerable code not present)
[buster] - linux <not-affected> (Vulnerable code not present)
NOTE:
https://git.kernel.org/linus/d839f0811a31322c087a859c2b181e2383daa7be (6.3-rc1)
+CVE-2023-3354 [VNC: improper I/O watch removal in TLS handshake can lead to
remote unauthenticated denial of service]
+ - qemu <unfixed>
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2216478
+ TODO: check, no details in RHBZ#2216478 on upstream status
CVE-2023-3432 (Server-Side Request Forgery (SSRF) in GitHub repository
plantuml/plant ...)
- plantuml <unfixed>
NOTE: https://huntr.dev/bounties/8ac3316f-431c-468d-87e4-3dafff2ecf51/
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9453111ac99bdad3642bcea5646253777af7b2d2
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9453111ac99bdad3642bcea5646253777af7b2d2
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
