[Git][security-tracker-team/security-tracker][master] Reserve DSA number for bind9 update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Sep 22 21:03:19 BST 2023
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
f0a4422a by Salvatore Bonaccorso at 2023-09-22T22:02:40+02:00
Reserve DSA number for bind9 update
- - - - -
3 changed files:
- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -293,6 +293,7 @@ CVE-2023-4504 (Due to failure in validating the length provided by an attacker-c
NOTE: Fixed by: https://github.com/OpenPrinting/libppd/commit/262c909ac5b8676d1c221584c5a760e5e83fae66
CVE-2023-4236 (A flaw in the networking code handling DNS-over-TLS queries may cause ...)
- bind9 1:9.19.17-1 (bug #1052417)
+ [bookworm] - bind9 1:9.18.19-1~deb12u1
[bullseye] - bind9 <not-affected> (Vulnerable code introduced later)
[buster] - bind9 <not-affected> (Vulnerable code introduced later)
NOTE: https://kb.isc.org/docs/cve-2023-4236
=====================================
data/DSA/list
=====================================
@@ -1,3 +1,7 @@
+[22 Sep 2023] DSA-5504-1 bind9 - security update
+ {CVE-2023-3341}
+ [bullseye] - bind9 1:9.16.44-1~deb11u1
+ [bookworm] - bind9 1:9.18.19-1~deb12u1
[20 Sep 2023] DSA-5503-1 netatalk - security update
{CVE-2021-31439 CVE-2022-0194 CVE-2022-23121 CVE-2022-23122 CVE-2022-23123 CVE-2022-23124 CVE-2022-23125 CVE-2022-43634 CVE-2022-45188 CVE-2023-42464}
[bullseye] - netatalk 3.1.12~ds-8+deb11u1
=====================================
data/dsa-needed.txt
=====================================
@@ -15,9 +15,6 @@ If needed, specify the release by adding a slash after the name of the source pa
audiofile
unfixed upstream
--
-bind9 (carnil)
- Maintainer prepared updates
---
cacti
--
cinder/oldstable
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f0a4422a26af6ee2a2de14ca9661e80bde62e7eb
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f0a4422a26af6ee2a2de14ca9661e80bde62e7eb
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230922/2342371f/attachment.htm>
More information about the debian-security-tracker-commits
mailing list