[Git][security-tracker-team/security-tracker][master] mark CVE-2020-8908 and CVE-2023-2976 as no-dsa for Buster

Thorsten Alteholz (@alteholz) alteholz at debian.org
Sat Jul 1 18:58:18 BST 2023



Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3ecc7e8a by Thorsten Alteholz at 2023-07-01T19:52:53+02:00
mark CVE-2020-8908 and CVE-2023-2976 as no-dsa for Buster

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1783,6 +1783,7 @@ CVE-2023-2976 (Use of Java's default temporary directory for file creation in `F
 	- guava-libraries 32.0.1-1 (bug #1038979)
 	[bookworm] - guava-libraries <no-dsa> (Minor issue)
 	[bullseye] - guava-libraries <no-dsa> (Minor issue)
+	[buster] - guava-libraries <no-dsa> (Minor issue)
 	NOTE: https://github.com/google/guava/releases/tag/v32.0.0
 	NOTE: https://github.com/google/guava/issues/2575
 CVE-2023-35149 (A missing permission check in Jenkins Digital.ai App Management Publis ...)
@@ -245076,6 +245077,7 @@ CVE-2020-8908 (A temp directory creation vulnerability exists in all versions of
 	- guava-libraries 32.0.1-1 (bug #1038979)
 	[bookworm] - guava-libraries <no-dsa> (Minor issue)
 	[bullseye] - guava-libraries <no-dsa> (Minor issue)
+	[buster] - guava-libraries <no-dsa> (Minor issue)
 	NOTE: https://github.com/google/guava/issues/4011
 	NOTE: https://github.com/google/guava/commit/fec0dbc4634006a6162cfd4d0d09c962073ddf40
 	NOTE: Issue incompletely fixed:



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3ecc7e8a0e85658c7eebc6bdba005b51bf14f18a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3ecc7e8a0e85658c7eebc6bdba005b51bf14f18a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230701/c058cfd1/attachment.htm>


More information about the debian-security-tracker-commits mailing list