[Git][security-tracker-team/security-tracker][master] Marked tang CVE-2023-1672 as no-dsa for buster following bullseye.

Ola Lundqvist (@opal) opal at debian.org
Wed Jun 14 20:02:19 BST 2023



Ola Lundqvist pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d7d9296a by Ola Lundqvist at 2023-06-14T21:01:52+02:00
Marked tang CVE-2023-1672 as no-dsa for buster following bullseye.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -10870,6 +10870,7 @@ CVE-2023-1672 [Fix race condition when creating/rotating keys]
 	- tang <unfixed>
 	[bookworm] - tang <no-dsa> (Minor issue)
 	[bullseye] - tang <no-dsa> (Minor issue)
+	[buster] - tang <no-dsa> (Minor issue)
 	NOTE: Fixed by: https://github.com/latchset/tang/commit/8dbbed10870378f1b2c3cf3df2ea7edca7617096
 CVE-2023-1671 (A pre-auth command injection vulnerability in the warn-proceed handler ...)
 	NOT-FOR-US: Sophos



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d7d9296ac83476231d72a71d43d798844ef6cced

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d7d9296ac83476231d72a71d43d798844ef6cced
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230614/546c3842/attachment.htm>


More information about the debian-security-tracker-commits mailing list