Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
aacddbb4 by Salvatore Bonaccorso at 2023-10-06T23:31:01+02:00
Add reference to oss-security post for avahi issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -239,23 +239,28 @@ CVE-2023-3430
CVE-2023-38473
- avahi <unfixed>
NOTE: https://github.com/lathiat/avahi/issues/451
+ NOTE: https://www.openwall.com/lists/oss-security/2023/10/06/4
CVE-2023-38472
- avahi <unfixed>
NOTE: https://github.com/lathiat/avahi/issues/452
+ NOTE: https://www.openwall.com/lists/oss-security/2023/10/06/4
CVE-2023-38471
- avahi <unfixed>
NOTE: https://github.com/lathiat/avahi/issues/453
+ NOTE: https://www.openwall.com/lists/oss-security/2023/10/06/4
CVE-2023-38470
- avahi <unfixed>
NOTE: https://github.com/lathiat/avahi/issues/454
NOTE: https://github.com/lathiat/avahi/pull/457
NOTE:
https://github.com/lathiat/avahi/commit/94cb6489114636940ac683515417990b55b5d66c
+ NOTE: https://www.openwall.com/lists/oss-security/2023/10/06/4
CVE-2023-38469
- avahi <unfixed>
[bookworm] - avahi <no-dsa> (Minor issue; can be mitigated by setting
disable-user-service-publishing to yes)
[bullseye] - avahi <no-dsa> (Minor issue; can be mitigated by setting
disable-user-service-publishing to yes)
[buster] - avahi <postponed> (Minor issue; can be mitigated by setting
disable-user-service-publishing to yes)
NOTE: https://github.com/lathiat/avahi/issues/455
+ NOTE: https://www.openwall.com/lists/oss-security/2023/10/06/4
CVE-2023-5402 (ACWE-269: Improper Privilege Management vulnerability
existsthat could ...)
NOT-FOR-US: Schneider Electric
CVE-2023-5399 (ACWE-22: Improper Limitation of a Pathname to a Restricted
Directory ( ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aacddbb46a2ec5017347a0f0fbbf3e4f543c47da
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aacddbb46a2ec5017347a0f0fbbf3e4f543c47da
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
