[Git][security-tracker-team/security-tracker][master] new unimportant log4cxx issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
faf8356f by Moritz Muehlenhoff at 2023-05-09T11:38:28+02:00
new unimportant log4cxx issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1062,7 +1062,9 @@ CVE-2023-2246 (A vulnerability has been found in SourceCodester Online Pizza Ord
 CVE-2023-31039 (Security vulnerabilityin Apache bRPC <1.5.0 on all platforms allows at ...)
 	NOT-FOR-US: Apache bRPC
 CVE-2023-31038 (SQL injection in Log4cxx when using the ODBC appender to send log mess ...)
-	TODO: check
+	- log4cxx <unfixed> (unimportant)
+	NOTE: https://lists.apache.org/thread/vgjlpdf353vv91gryspwxrzj6p0fbjd9
+	NOTE: ODBC appender not enabled in Debian builds
 CVE-2023-2245 (A vulnerability was found in hansunCMS 1.4.3. It has been declared as  ...)
 	NOT-FOR-US: hansunCMS
 CVE-2023-2244 (A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. I ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/faf8356ff7e0e4e684b4a5944f29af3c4c4b5ebf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/faf8356ff7e0e4e684b4a5944f29af3c4c4b5ebf
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230509/b428a2bd/attachment.htm>