Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
db833dc3 by Salvatore Bonaccorso at 2023-12-23T08:57:11+01:00
Track followup cpio fix for regression fix
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -515315,6 +515315,7 @@ CVE-2023-XXXX [Path traversal vulnerability due to
partial revert of fix for CVE
[bullseye] - cpio <no-dsa> (Minor issue)
[buster] - cpio <not-affected> (Partial CVE-2015-1197 patch revert not
applied)
NOTE: https://www.openwall.com/lists/oss-security/2023/12/21/8
+ NOTE: Fixed by:
https://git.savannah.gnu.org/cgit/cpio.git/commit/?id=376d663340a9dc91c91a5849e5713f07571c1628
(v2.14)
CVE-2015-1197 (cpio 2.11, when using the --no-absolute-filenames option,
allows local ...)
- cpio 2.11+dfsg-4.1 (low; bug #774669)
[wheezy] - cpio <no-dsa> (Minor issue)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/db833dc3587f2c7d49c7ff9aee7df8b71042a742
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/db833dc3587f2c7d49c7ff9aee7df8b71042a742
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
