[Git][security-tracker-team/security-tracker][master] CVE-2023-32732/grpc: slight clarification

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
865da069 by Sylvain Beucler at 2023-08-01T19:53:11+02:00
CVE-2023-32732/grpc: slight clarification

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6032,7 +6032,7 @@ CVE-2023-32732 (gRPC contains a vulnerability whereby a client can cause a termi
 	- grpc <unfixed>
 	[bookworm] - grpc <no-dsa> (Minor issue)
 	[bullseye] - grpc <no-dsa> (Minor issue)
-	[buster] - grpc <postponed> (Minor issue; request smuggling; recheck if fixed or introduced by #32309 when CVE description is updated)
+	[buster] - grpc <postponed> (Minor issue; request smuggling; recheck whether fixed or introduced by #32309 when CVE description is updated)
 	NOTE: https://github.com/grpc/grpc/pull/32309
 	NOTE: CVE description and fix are sensible, but there seem to be confusion: https://github.com/grpc/grpc/pull/32309#issuecomment-1589703522
 CVE-2023-32731 (When gRPC HTTP2 stack raised a header size exceeded error, it skipped  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/865da069cae14c3f6dcda67e64d278bc0345b18c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/865da069cae14c3f6dcda67e64d278bc0345b18c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230801/17810662/attachment.htm>