[Git][security-tracker-team/security-tracker][master] CVE-2024-34055/cyrus-imapd: Ignore also in buster

Adrian Bunk (@bunk) bunk at debian.org
Wed Jun 12 15:43:58 BST 2024



Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker


Commits:
abc9f015 by Adrian Bunk at 2024-06-12T17:43:12+03:00
CVE-2024-34055/cyrus-imapd: Ignore also in buster

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -2087,6 +2087,7 @@ CVE-2024-34055 (Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows auth
 	{DSA-5708-1}
 	- cyrus-imapd 3.8.3-1
 	[bullseye] - cyrus-imapd <ignored> (Too intrusive to backport)
+	[buster] - cyrus-imapd <ignored> (Too intrusive to backport)
 	NOTE: https://cyrus.topicbox.com/groups/announce/Ta8e3998446caf7f8/cyrus-imap-3-8-3-3-6-5-and-3-4-8-released
 CVE-2024-5463 (A vulnerability regarding buffer copy without checking the size of inp ...)
 	NOT-FOR-US: Synology


=====================================
data/dla-needed.txt
=====================================
@@ -54,6 +54,7 @@ cups (Thorsten Alteholz)
 --
 cyrus-imapd
   NOTE: 20240609: Added by Front-Desk (apo)
+  NOTE: 20240612: Asked coordinators to review CVE-2024-34055. (bunk)
 --
 dcmtk (Adrian Bunk)
   NOTE: 20240428: Added by Front-Desk (ta)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/abc9f0155088bbbc1ef36e674b95c8adf9326e90

-- 
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/abc9f0155088bbbc1ef36e674b95c8adf9326e90
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240612/f811f137/attachment.htm>


More information about the debian-security-tracker-commits mailing list