Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b11b98d8 by Moritz Mühlenhoff at 2024-03-14T12:09:35+01:00
bookworm/bullseye
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -619,6 +619,7 @@ CVE-2024-27894 (The Pulsar Functions Worker includes a
capability that permits a
NOT-FOR-US: Apache Pulsar
CVE-2024-27758 (In RPyC before 6.0.0, when a server exposes a method that
calls the at ...)
- rpyc <unfixed>
+ [bookworm] - rpyc <no-dsa> (Minor issue)
NOTE:
https://github.com/tomerfiliba-org/rpyc/security/advisories/GHSA-h5cg-53g7-gqjw
NOTE: https://github.com/tomerfiliba-org/rpyc/issues/551
NOTE:
https://github.com/tomerfiliba-org/rpyc/commit/bba1d3562e6f9f1256ec64048cc23001c0bb7516
(6.0.0)
@@ -858,6 +859,7 @@ CVE-2023-36554 (A improper access control in Fortinet
FortiManager version 7.4.0
NOT-FOR-US: FortiGuard
CVE-2024-2182 (A flaw was found in the Open Virtual Network (OVN). In OVN
clusters wh ...)
- ovn 24.03.1-1
+ [bookworm] - ovn <no-dsa> (Minor issue)
NOTE: https://bugs.launchpad.net/bugs/2053113
NOTE:
https://mail.openvswitch.org/pipermail/ovs-announce/2024-March/000346.html
CVE-2023-43490
@@ -919,7 +921,11 @@ CVE-2024-27900 (Due to missing authorization check,
attacker with business user
NOT-FOR-US: SAP
CVE-2024-27297 (Nix is a package manager for Linux and other Unix systems. A
fixed-out ...)
- guix <unfixed> (bug #1066113)
+ [bookworm] - guix <no-dsa> (Minor issue)
+ [bullseye] - guix <no-dsa> (Minor issue)
- nix <unfixed> (bug #1066812)
+ [bookworm] - nix <no-dsa> (Minor issue)
+ [bullseye] - nix <no-dsa> (Minor issue)
NOTE: Fixed by:
https://git.savannah.gnu.org/cgit/guix.git/commit/?id=8f4ffb3fae133bb21d7991e97c2f19a7108b1143
NOTE:
https://guix.gnu.org/en/blog/2024/fixed-output-derivation-sandbox-bypass-cve-2024-27297/
NOTE:
https://github.com/NixOS/nix/security/advisories/GHSA-2ffj-w4mj-pg37
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b11b98d89550ce201b0de31401e822c55f4fa2a1
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b11b98d89550ce201b0de31401e822c55f4fa2a1
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
