[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2023-22490 and CVE-2023-23946

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Feb 15 21:24:14 GMT 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2e2a853c by Salvatore Bonaccorso at 2023-02-15T22:23:24+01:00
Add Debian bug reference for CVE-2023-22490 and CVE-2023-23946

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5245,7 +5245,7 @@ CVE-2023-23948 (The ownCloud Android app allows ownCloud users to access, share,
 CVE-2023-23947
 	RESERVED
 CVE-2023-23946 (Git, a revision control system, is vulnerable to path traversal prior  ...)
-	- git <unfixed>
+	- git <unfixed> (bug #1031310)
 	NOTE: https://www.openwall.com/lists/oss-security/2023/02/14/5
 	NOTE: https://github.com/git/git/commit/fade728df1221598f42d391cf377e9e84a32053f (v2.30.8)
 CVE-2023-23945
@@ -10015,7 +10015,7 @@ CVE-2023-22492 (ZITADEL is a combination of Auth0 and Keycloak. RefreshTokens is
 CVE-2023-22491 (Gatsby is a free and open source framework based on React that helps d ...)
 	NOT-FOR-US: Gatsby
 CVE-2023-22490 (Git is a revision control system. Using a specially-crafted repository ...)
-	- git <unfixed>
+	- git <unfixed> (bug #1031310)
 	NOTE: https://www.openwall.com/lists/oss-security/2023/02/14/5
 	NOTE: https://github.com/git/git/commit/58325b93c5b6212697b088371809e9948fee8052 (v2.30.8)
 	NOTE: https://github.com/git/git/commit/cf8f6ce02a13f4d1979a53241afbee15a293fce9 (v2.30.8)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2e2a853c6211d30310efc7142d24b00e5679cbd0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2e2a853c6211d30310efc7142d24b00e5679cbd0
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230215/9323e809/attachment.htm>


More information about the debian-security-tracker-commits mailing list