[Git][security-tracker-team/security-tracker][master] Marked CVE-2022-42906 as ignored for buster. For bullseye it was marked as...

[Ola Lundqvist (@opal)]

Ola Lundqvist pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4ad01db2 by Ola Lundqvist at 2022-11-03T21:32:13+01:00
Marked CVE-2022-42906 as ignored for buster. For bullseye it was marked as no-dsa and minor issue. Considering that the solution require the user to reconfigure the system meaning it is not backwards compatible together that it is considered minor for bullseye the decision is to ignore it for buster.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6494,6 +6494,7 @@ CVE-2022-3478
 CVE-2022-42906 (powerline-gitstatus (aka Powerline Gitstatus) before 1.3.2 allows arbi ...)
 	- powerline-gitstatus 1.3.2-1
 	[bullseye] - powerline-gitstatus <no-dsa> (Minor issue)
+	[buster] - powerline-gitstatus <ignored> (Minor issue and solution require the user to reconfigure)
 	NOTE: https://github.com/jaspernbrouwer/powerline-gitstatus/issues/45
 	NOTE: https://github.com/jaspernbrouwer/powerline-gitstatus/pull/46
 CVE-2022-42896 [Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM]



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4ad01db266632baae827e1271626bd4d978b07e6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4ad01db266632baae827e1271626bd4d978b07e6
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221103/eb81f184/attachment.htm>