[Git][security-tracker-team/security-tracker][master] CVE-2023-469{2, 3}: Reference as well kernel-list post for easier patch reviews

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Oct 4 20:16:30 BST 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
623828ac by Salvatore Bonaccorso at 2023-10-04T21:15:40+02:00
CVE-2023-469{2,3}: Reference as well kernel-list post for easier patch reviews

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -209,9 +209,11 @@ CVE-2023-2544 (Authorization bypass vulnerability in UPV PEIX, affecting the com
 CVE-2023-4693 [Crafted file system images can cause out-of-bounds write and may leak sensitive information into the GRUB pager]
 	- grub2 2.12~rc1-11
 	NOTE: https://lists.gnu.org/archive/html/grub-devel/2023-10/msg00028.html
+	NOTE: https://lore.kernel.org/all/ZRxK8s4nQV2jBq%2F9@tomti.i.net-space.pl/
 CVE-2023-4692 [Crafted file system images can cause heap-based buffer overflow and may allow arbitrary code execution and secure boot bypass]
 	- grub2 2.12~rc1-11
 	NOTE: https://lists.gnu.org/archive/html/grub-devel/2023-10/msg00028.html
+	NOTE: https://lore.kernel.org/all/ZRxK8s4nQV2jBq%2F9@tomti.i.net-space.pl/
 CVE-2023-4911 (A buffer overflow was discovered in the GNU C Library's dynamic loader ...)
 	{DSA-5514-1}
 	- glibc 2.37-12



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/623828aca02b2fa6949bd4c5717b3644ee4a3907

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/623828aca02b2fa6949bd4c5717b3644ee4a3907
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231004/85e67c84/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list