[Git][security-tracker-team/security-tracker][master] Reference vendor changes (Rocky Linux, RHEL) for CVE-2023-5388

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a6349adb by Salvatore Bonaccorso at 2024-02-09T22:07:06+01:00
Reference vendor changes (Rocky Linux, RHEL) for CVE-2023-5388

Debian should IMHO rather wait for the upstream'ed patch and revisit our
assessment on need to patch for stable suites based on that.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -20097,6 +20097,7 @@ CVE-2023-5388
 	[bullseye] - nss <postponed> (Minor issue, revisit once fixed upstream)
 	[buster] - nss <no-dsa> (Minor issue)
 	NOTE: https://people.redhat.com/~hkario/marvin/
+	NOTE: Vendor patch (Rocky Linux, not upstreamed): https://git.rockylinux.org/staging/rpms/nss/-/commit/1f7f7523b61a2ada2f461548c4160fbbf979c5dd
 CVE-2023-5551 (Separate Groups mode restrictions were not honoured in the forum summa ...)
 	- moodle <removed>
 CVE-2023-5550 (In a shared hosting environment that has been misconfigured to allow a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a6349adb0e503f3792b0e016e95aa7d5d367a149

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a6349adb0e503f3792b0e016e95aa7d5d367a149
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240209/bb712b0d/attachment.htm>