Bastien Roucariès pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ee5aa032 by Bastien Roucariès at 2024-01-21T11:52:59+00:00
CVE-2023-28486
Add a new commit fixing a regression
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -47812,6 +47812,7 @@ CVE-2023-28486 (Sudo before 1.9.13 does not escape
control characters in log mes
[bullseye] - sudo <no-dsa> (Minor issue)
[buster] - sudo <no-dsa> (Minor issue)
NOTE:
https://github.com/sudo-project/sudo/commit/334daf92b31b79ce68ed75e2ee14fca265f029ca
+ NOTE:
https://github.com/sudo-project/sudo/commit/12648b4e0a8cf486480442efd52f0e0b6cab6e8b
(fix a regression)
CVE-2023-28485 (A stored cross-site scripting (Stored XSS) vulnerability in
file previ ...)
NOT-FOR-US: WeKan
CVE-2023-28484 (In libxml2 before 2.10.4, parsing of certain invalid XSD
schemas can l ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ee5aa0327f76a65eba8a0388a8b63b6393d92835
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ee5aa0327f76a65eba8a0388a8b63b6393d92835
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
