[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2022-21698/golang-github-prometheus-client-golang: stretch postponed

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
10ef6d47 by Sylvain Beucler at 2022-05-25T09:34:15+02:00
CVE-2022-21698/golang-github-prometheus-client-golang: stretch postponed

- - - - -
20db17ba by Sylvain Beucler at 2022-05-25T09:44:10+02:00
CVE-2022-30065/busybox: stretch postponed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4156,6 +4156,7 @@ CVE-2022-30065 (A use-after-free in Busybox 1.35-x's awk applet leads to denial
 	- busybox <unfixed>
 	[bullseye] - busybox <no-dsa> (Minor issue)
 	[buster] - busybox <no-dsa> (Minor issue)
+	[stretch] - busybox <postponed> (Minor issue, requires passing arbitrary awk program, no identified patch)
 	NOTE: https://bugs.busybox.net/show_bug.cgi?id=14781
 CVE-2022-30064
 	RESERVED
@@ -35819,6 +35820,7 @@ CVE-2022-21699 (IPython (Interactive Python) is a command shell for interactive
 	NOTE: https://ipython.readthedocs.io/en/stable/whatsnew/version8.html#ipython-8-0-1-cve-2022-21699
 CVE-2022-21698 (client_golang is the instrumentation library for Go applications in Pr ...)
 	- golang-github-prometheus-client-golang 1.11.1-1 (bug #1008008)
+	[stretch] - golang-github-prometheus-client-golang <postponed> (Minor issue, DoS in specific conditions, requires rebuilding reverse-dependencies; Limited support in stretch)
 	NOTE: https://github.com/prometheus/client_golang/security/advisories/GHSA-cg3q-j54f-5p7p
 	NOTE: https://github.com/prometheus/client_golang/pull/962
 	NOTE: https://github.com/prometheus/client_golang/pull/987



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/aad31e881a8bd181f8dc7399e43631a6fcd65da6...20db17ba098e0018ada48673ed89550a7f049262

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/aad31e881a8bd181f8dc7399e43631a6fcd65da6...20db17ba098e0018ada48673ed89550a7f049262
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220525/e35e7c78/attachment-0001.htm>