[Git][security-tracker-team/security-tracker][master] CVE-2023-469{2, 3}: Reference as well kernel-list post for easier patch reviews
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Oct 4 20:16:30 BST 2023
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
623828ac by Salvatore Bonaccorso at 2023-10-04T21:15:40+02:00
CVE-2023-469{2,3}: Reference as well kernel-list post for easier patch reviews
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -209,9 +209,11 @@ CVE-2023-2544 (Authorization bypass vulnerability in UPV PEIX, affecting the com
CVE-2023-4693 [Crafted file system images can cause out-of-bounds write and may leak sensitive information into the GRUB pager]
- grub2 2.12~rc1-11
NOTE: https://lists.gnu.org/archive/html/grub-devel/2023-10/msg00028.html
+ NOTE: https://lore.kernel.org/all/ZRxK8s4nQV2jBq%2F9@tomti.i.net-space.pl/
CVE-2023-4692 [Crafted file system images can cause heap-based buffer overflow and may allow arbitrary code execution and secure boot bypass]
- grub2 2.12~rc1-11
NOTE: https://lists.gnu.org/archive/html/grub-devel/2023-10/msg00028.html
+ NOTE: https://lore.kernel.org/all/ZRxK8s4nQV2jBq%2F9@tomti.i.net-space.pl/
CVE-2023-4911 (A buffer overflow was discovered in the GNU C Library's dynamic loader ...)
{DSA-5514-1}
- glibc 2.37-12
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/623828aca02b2fa6949bd4c5717b3644ee4a3907
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/623828aca02b2fa6949bd4c5717b3644ee4a3907
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231004/85e67c84/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list