Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a431706b by Salvatore Bonaccorso at 2023-12-20T22:20:05+01:00
Reference upstream commit for CVE-2023-48795/tinyssh
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -672,6 +672,7 @@ CVE-2023-48795 (The SSH transport protocol with certain
OpenSSH extensions, foun
NOTE: asyncssh:
https://github.com/ronf/asyncssh/security/advisories/GHSA-hfmc-7525-mj55
NOTE: asyncssh:
https://github.com/ronf/asyncssh/commit/0bc73254f41acb140187e0c89606311f88de5b7b
(v2.14.2)
NOTE: tinyssh: https://github.com/janmojzis/tinyssh/issues/81
+ NOTE: tinyssh:
https://github.com/janmojzis/tinyssh/commit/ebaa1bd23c2c548af70cc8151e85c74f4c8594bb
CVE-2023-41314 (The api /api/snapshot and /api/get_log_file would allow
unauthenticate ...)
NOT-FOR-US: Apache Doris
CVE-2023-6909 (Path Traversal: '\..\filename' in GitHub repository
mlflow/mlflow prio ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a431706b0495cf60c4ace5b0217d2954b6e7227d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a431706b0495cf60c4ace5b0217d2954b6e7227d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
