[Git][security-tracker-team/security-tracker][master] CVE-2023-30534/cacti: buster postponed + patches

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
707ad520 by Sylvain Beucler at 2023-12-20T19:08:45+01:00
CVE-2023-30534/cacti: buster postponed + patches

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -35657,7 +35657,13 @@ CVE-2023-30534 (Cacti is an open source operational monitoring and fault managem
 	- cacti 1.2.25+ds1-1
 	[bookworm] - cacti <postponed> (Can be included in next DSA round or pu)
 	[bullseye] - cacti <postponed> (Can be included in next DSA round or pu)
+	[buster] - cacti <postponed> (Minor issue, not exploitable in standard Cacti; Can be included in next DLA round)
 	NOTE: https://github.com/Cacti/cacti/security/advisories/GHSA-77rf-774j-6h3p
+	NOTE: https://github.com/Cacti/cacti/commit/8c6cd77001697f4b82cc55055b945c2f3974976c (release/1.2.24)
+	NOTE: https://github.com/Cacti/cacti/commit/cf1033670af4264a6ba7d687b47fed92e376f18f (release/1.2.25)
+	NOTE: https://github.com/Cacti/cacti/commit/6d22e0623dfbc5d687d8f61e683173d0d625f3a7 (release/1.2.25)
+	NOTE: https://github.com/Cacti/cacti/commit/7b1ae5bcab3caca020da0080e19ac51c2743adfe (release/1.2.25)
+	NOTE: https://github.com/Cacti/cacti/commit/35d76a87d10ffeec483c768663013746624cecbf (release/1.2.25)
 CVE-2023-30533 (SheetJS Community Edition before 0.19.3 allows Prototype Pollution via ...)
 	NOT-FOR-US: SheetJS
 CVE-2023-2011



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/707ad5208f4def959f97c9cfee57ab7f3366b018

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/707ad5208f4def959f97c9cfee57ab7f3366b018
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231220/71855120/attachment-0001.htm>