Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
26cb5680 by Salvatore Bonaccorso at 2023-08-11T16:37:19+02:00
Add CVE-2023-40267/python-git
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -9,7 +9,9 @@ CVE-2023-4106 (Mattermost fails to check if the requesting user
is a guest befor
CVE-2023-4105 (Mattermost fails to delete the attachments when deleting a
message in ...)
TODO: check
CVE-2023-40267 (GitPython before 3.1.32 does not block insecure non-multi
options in c ...)
- TODO: check
+ - python-git <unfixed>
+ NOTE: https://github.com/gitpython-developers/GitPython/pull/1609
+ NOTE:
https://github.com/gitpython-developers/GitPython/commit/5c59e0d63da6180db8a0b349f0ad36fef42aceed
(3.1.32)
CVE-2023-40260 (EmpowerID before 7.205.0.1 allows an attacker to bypass an MFA
(multi ...)
NOT-FOR-US: EmpowerID
CVE-2023-40256 (A vulnerability was discovered in Veritas NetBackup Snapshot
Manager b ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/26cb56800e49c654030e7287dbef61d3bb9c417d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/26cb56800e49c654030e7287dbef61d3bb9c417d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
