[Git][security-tracker-team/security-tracker][master] CVE-2024-34055/cyrus-imapd: Ignore also in buster
Adrian Bunk (@bunk)
bunk at debian.org
Wed Jun 12 15:43:58 BST 2024
Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker
Commits:
abc9f015 by Adrian Bunk at 2024-06-12T17:43:12+03:00
CVE-2024-34055/cyrus-imapd: Ignore also in buster
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -2087,6 +2087,7 @@ CVE-2024-34055 (Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows auth
{DSA-5708-1}
- cyrus-imapd 3.8.3-1
[bullseye] - cyrus-imapd <ignored> (Too intrusive to backport)
+ [buster] - cyrus-imapd <ignored> (Too intrusive to backport)
NOTE: https://cyrus.topicbox.com/groups/announce/Ta8e3998446caf7f8/cyrus-imap-3-8-3-3-6-5-and-3-4-8-released
CVE-2024-5463 (A vulnerability regarding buffer copy without checking the size of inp ...)
NOT-FOR-US: Synology
=====================================
data/dla-needed.txt
=====================================
@@ -54,6 +54,7 @@ cups (Thorsten Alteholz)
--
cyrus-imapd
NOTE: 20240609: Added by Front-Desk (apo)
+ NOTE: 20240612: Asked coordinators to review CVE-2024-34055. (bunk)
--
dcmtk (Adrian Bunk)
NOTE: 20240428: Added by Front-Desk (ta)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/abc9f0155088bbbc1ef36e674b95c8adf9326e90
--
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/abc9f0155088bbbc1ef36e674b95c8adf9326e90
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240612/f811f137/attachment.htm>
More information about the debian-security-tracker-commits
mailing list