[Git][security-tracker-team/security-tracker][master] Marked yajl CVE-2023-33460 as postponed.
Ola Lundqvist (@opal)
opal at debian.org
Wed Jun 14 22:27:02 BST 2023
Ola Lundqvist pushed to branch master at Debian Security Tracker / security-tracker
Commits:
defddfbb by Ola Lundqvist at 2023-06-14T23:19:29+02:00
Marked yajl CVE-2023-33460 as postponed.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1042,6 +1042,7 @@ CVE-2023-33477 (In Harmonic NSG 9000-6G devices, an authenticated remote user ca
NOT-FOR-US: Harmonic NSG 9000-6G devices
CVE-2023-33460 (There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse functi ...)
- yajl <unfixed>
+ [buster] - yajl <postponed> (Minor issue)
NOTE: https://github.com/lloyd/yajl/issues/250
CVE-2023-33457 (In Sogou Workflow v0.10.6, memcpy a negtive size in URIParser::parse , ...)
NOT-FOR-US: Sogou Workflow
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/defddfbb8f457128e03ef60feb5f6c6be56f771d
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/defddfbb8f457128e03ef60feb5f6c6be56f771d
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230614/a342b58f/attachment.htm>
More information about the debian-security-tracker-commits
mailing list