[Git][security-tracker-team/security-tracker][master] vlc, cyrus-imapd DSAs

Moritz Muehlenhoff (@jmm) jmm at debian.org
Tue Jun 11 19:16:53 BST 2024



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5accdd1a by Moritz Mühlenhoff at 2024-06-11T20:13:46+02:00
vlc, cyrus-imapd DSAs

- - - - -


3 changed files:

- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -1573,6 +1573,7 @@ CVE-2024-1161 (The Brizy \u2013 Page Builder plugin for WordPress is vulnerable
 	NOT-FOR-US: WordPress plugin
 CVE-2024-34055 (Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authentica ...)
 	- cyrus-imapd 3.8.3-1
+	[bullseye] - cyrus-imapd <ignored> (Too intrusive to backport)
 	NOTE: https://cyrus.topicbox.com/groups/announce/Ta8e3998446caf7f8/cyrus-imap-3-8-3-3-6-5-and-3-4-8-released
 CVE-2024-5463 (A vulnerability regarding buffer copy without checking the size of inp ...)
 	NOT-FOR-US: Synology


=====================================
data/DSA/list
=====================================
@@ -1,3 +1,9 @@
+[11 Jun 2024] DSA-5708-1 cyrus-imapd - security update
+	{CVE-2024-34055}
+	[bookworm] - cyrus-imapd 3.6.1-4+deb12u2
+[11 Jun 2024] DSA-5707-1 vlc - security update
+	[bullseye] - vlc 3.0.21-0+deb11u1
+	[bookworm] - vlc 3.0.21-0+deb12u1
 [05 Jun 2024] DSA-5706-1 libarchive - security update
 	{CVE-2024-26256}
 	[bookworm] - libarchive 3.6.2-1+deb12u1


=====================================
data/dsa-needed.txt
=====================================
@@ -14,8 +14,6 @@ If needed, specify the release by adding a slash after the name of the source pa
 --
 cacti
 --
-cyrus-imapd (jmm)
---
 dnsdist (jmm)
 --
 dnsmasq



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5accdd1a9bc7d70aec2e7ba1faa6e166d1aee177

-- 
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5accdd1a9bc7d70aec2e7ba1faa6e166d1aee177
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240611/49cc710d/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list