Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1a7fe188 by Salvatore Bonaccorso at 2023-12-24T10:29:55+01:00
Clarify situation around CVE-2023-49088 (incomplete fix for CVE-2023-39515)
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -184,6 +184,7 @@ CVE-2023-49356 (A stack buffer overflow vulnerability in
MP3Gain v1.6.2 allows a
NOTE: Likely the same and duplicate of CVE-2018-10777 and covered by
the same fixes applied
CVE-2023-49088 (Cacti is an open source operational monitoring and fault
management fr ...)
- cacti <unfixed>
+ NOTE: Caused by an incomplete fix for CVE-2023-39515
NOTE:
https://github.com/Cacti/cacti/security/advisories/GHSA-q7g7-gcf6-wh4x
NOTE:
https://github.com/Cacti/cacti/security/advisories/GHSA-hrg9-qqqx-wc4h
(CVE-2023-39515)
CVE-2023-49085 (Cacti provides an operational monitoring and fault management
framewor ...)
@@ -18690,7 +18691,8 @@ CVE-2023-39515 (Cacti is an open source operational
monitoring and fault managem
{DSA-5550-1}
- cacti 1.2.25+ds1-1
NOTE:
https://github.com/Cacti/cacti/security/advisories/GHSA-hrg9-qqqx-wc4h
- NOTE:
https://github.com/Cacti/cacti/commit/8d8aeec0eca3be7b10a12e6c2a78e6560bcef43e
+ NOTE: Fixed by:
https://github.com/Cacti/cacti/commit/8d8aeec0eca3be7b10a12e6c2a78e6560bcef43e
(release/1.2.25)
+ NOTE: Applying incomplete fix for CVE-2023-39515 opens up CVE-2023-49088
CVE-2023-39514 (Cacti is an open source operational monitoring and fault
management fr ...)
- cacti 1.2.25+ds1-1
[bookworm] - cacti 1.2.24+ds1-1+deb12u1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1a7fe188ec35b4cfbfb57c548bac7bb54cb90782
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1a7fe188ec35b4cfbfb57c548bac7bb54cb90782
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
