[Git][security-tracker-team/security-tracker][master] c-ares fixed in experimental

Moritz Muehlenhoff (@jmm) jmm at debian.org
Mon May 22 16:52:44 BST 2023



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c3bad6ef by Moritz Muehlenhoff at 2023-05-22T17:52:15+02:00
c-ares fixed in experimental

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,4 +1,5 @@
 CVE-2023-32067
+	[experimental] - c-ares 1.19.1-1
 	- c-ares <unfixed>
 	NOTE: https://github.com/c-ares/c-ares/security/advisories/GHSA-9g78-jv2r-p7vc
 CVE-2023-33297 (Bitcoin Core before 24.1, when debug mode is not used, allows attacker ...)
@@ -1828,6 +1829,7 @@ CVE-2023-31148 (An Improper Input Validation vulnerability   in the Schweitzer E
 	NOT-FOR-US: Schweitzer Engineering Laboratories
 CVE-2023-31147
 	RESERVED
+	[experimental] - c-ares 1.19.1-1
 	- c-ares <unfixed> (unimportant)
 	NOTE: https://github.com/c-ares/c-ares/security/advisories/GHSA-8r8p-23f3-64c2
 	NOTE: Any Debian system/port provides /dev/urandom
@@ -1867,6 +1869,7 @@ CVE-2023-31131 (Greenplum Database (GPDB) is an open source data warehouse based
 	NOT-FOR-US: Greenplum Database
 CVE-2023-31130
 	RESERVED
+	[experimental] - c-ares 1.19.1-1
 	- c-ares <unfixed>
 	NOTE: https://github.com/c-ares/c-ares/security/advisories/GHSA-x6mf-cxr9-8q6v
 CVE-2023-31129 (The Contiki-NG operating system versions 4.8 and prior can be triggere ...)
@@ -1881,6 +1884,7 @@ CVE-2023-31125 (Engine.IO is the implementation of transport-based cross-browser
 	NOT-FOR-US: Engine.IO
 CVE-2023-31124
 	RESERVED
+	[experimental] - c-ares 1.19.1-1
 	- c-ares <unfixed> (unimportant)
 	NOTE: https://github.com/c-ares/c-ares/security/advisories/GHSA-54xr-f67r-4pc4
 	NOTE: No impact on binaries shipped by Debian



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c3bad6ef0e67ab188ebf61c1f75264d19de1dca4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c3bad6ef0e67ab188ebf61c1f75264d19de1dca4
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230522/cefdab89/attachment.htm>


More information about the debian-security-tracker-commits mailing list