Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fadf81c7 by Salvatore Bonaccorso at 2023-09-16T20:46:30+02:00
Demote severity for CVE-2022-34038/etcd
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -88776,13 +88776,11 @@ CVE-2022-34040
CVE-2022-34039
RESERVED
CVE-2022-34038 (Etcd v3.5.4 allows remote attackers to cause a denial of
service via f ...)
- - etcd <unfixed>
- [bookworm] - etcd <no-dsa> (Minor issue)
- [bullseye] - etcd <no-dsa> (Minor issue)
- [buster] - etcd <no-dsa> (Minor issue)
+ - etcd <unfixed> (unimportant)
NOTE: https://github.com/etcd-io/etcd/pull/14022
NOTE: https://github.com/etcd-io/etcd/pull/14452
NOTE: Fixed by:
https://github.com/etcd-io/etcd/commit/5a315ef88fbfa454e02d27b0b8acb4f89457cd90
+ NOTE: Negligible (and upstream disputed) security impact
CVE-2022-34037 (An out-of-bounds read in the rewrite function at
/modules/caddyhttp/re ...)
NOT-FOR-US: Caddy
CVE-2022-34036
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fadf81c71db3035f6502b25ee14c5e6fb46ee657
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fadf81c71db3035f6502b25ee14c5e6fb46ee657
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
