Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
81e98d9e by Salvatore Bonaccorso at 2023-11-18T20:45:30+01:00
postponed libspf2 until there is some resolution in upstream and ZDI status
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -8852,6 +8852,8 @@ CVE-2023-42119 [Exim dnsdb Out-Of-Bounds Read Information
Disclosure Vulnerabili
NOTE: https://exim.org/static/doc/security/CVE-2023-zdi.txt
CVE-2023-42118 [Exim libspf2 Integer Underflow Remote Code Execution
Vulnerability]
- libspf2 <unfixed> (bug #1053870)
+ [bookworm] - libspf2 <postponed> (Revisit once upstream and ZDI status
is clarfied)
+ [bullseye] - libspf2 <postponed> (Revisit once upstream and ZDI status
is clarfied)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-23-1472/
NOTE: https://bugs.exim.org/show_bug.cgi?id=3032
NOTE: https://www.openwall.com/lists/oss-security/2023/09/29/5
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/81e98d9e1f7b761d213ef5f26314a7721b336045
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/81e98d9e1f7b761d213ef5f26314a7721b336045
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
