[Git][security-tracker-team/security-tracker][master] Update findings for CVE-2023-49288

[Daniel Leidert (@dleidert)]

Daniel Leidert pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d0a41abf by Daniel Leidert at 2024-04-07T22:37:43+02:00
Update findings for CVE-2023-49288

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -320670,7 +320670,8 @@ CVE-2023-49288 (Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP
 	- squid 6.1-1
 	- squid3 <removed>
 	NOTE: https://github.com/squid-cache/squid/security/advisories/GHSA-rj5h-46j6-q2g5
-	NOTE: https://github.com/squid-cache/squid/pull/1136
+	NOTE: https://megamansec.github.io/Squid-Security-Audit/trace-uaf.html
+	NOTE: https://github.com/squid-cache/squid/pull/1127 possibly removed the vulnerable code.
 CVE-2023-49286 (Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and  ...)
 	{DSA-5637-1 DLA-3709-1}
 	- squid 6.5-1 (low)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d0a41abf91541e98514b78d27135c36a24245e86

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d0a41abf91541e98514b78d27135c36a24245e86
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240407/beddf4d1/attachment.htm>