[Git][security-tracker-team/security-tracker][master] Add references for rsync commits in v3.4.0

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1f239aba by Salvatore Bonaccorso at 2025-01-14T20:39:41+01:00
Add references for rsync commits in v3.4.0

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9,24 +9,32 @@ CVE-2024-50349
 CVE-2024-12747
 	- rsync 3.3.0+ds1-3
 	NOTE: https://www.openwall.com/lists/oss-security/2025/01/14/3
+	NOTE: Fixed by: https://git.samba.org/?p=rsync.git;a=commit;h=0590b09d9a34ae72741b91ec0708a820650198b0 (v3.4.0)
 CVE-2024-12088
 	- rsync 3.3.0+ds1-3
 	NOTE: https://www.openwall.com/lists/oss-security/2025/01/14/3
-	NOTE: https://github.com/RsyncProject/rsync/commit/407c71c7ce562137230e8ba19149c81ccc47c387
+	NOTE: Fixed by: https://git.samba.org/?p=rsync.git;a=commit;h=407c71c7ce562137230e8ba19149c81ccc47c387 (v3.4.0)
 CVE-2024-12087
 	- rsync 3.3.0+ds1-3
 	NOTE: https://www.openwall.com/lists/oss-security/2025/01/14/3
+	NOTE: Fixed by: https://git.samba.org/?p=rsync.git;a=commit;h=688f5c379a433038bde36897a156d589be373a98 (v3.4.0)
+	NOTE: Fixed by: https://git.samba.org/?p=rsync.git;a=commit;h=344327385fa47fa5bb67a32c237735e6240cfb93 (v3.4.0)
 CVE-2024-12086
 	- rsync 3.3.0+ds1-3
 	NOTE: https://www.openwall.com/lists/oss-security/2025/01/14/3
+	NOTE: Fixed by: https://git.samba.org/?p=rsync.git;a=commit;h=8ad4b5d912fad1df29717dddaa775724da77d299 (v3.4.0)
+	NOTE: Fixed by: https://git.samba.org/?p=rsync.git;a=commit;h=b4a27ca25d0abb6fcf14f41b7e11f3a6e1d8a4ff (v3.4.0)
+	NOTE: Fixed by: https://git.samba.org/?p=rsync.git;a=commit;h=c35e28331f10ba6eba370611abd78bde32d54da7 (v3.4.0)
+	NOTE: Fixed by: https://git.samba.org/?p=rsync.git;a=commit;h=9f86ddc9652247233f32b241a79d5aa4fb9d4afa (v3.4.0)
 CVE-2024-12085
 	- rsync 3.3.0+ds1-3
 	NOTE: https://www.openwall.com/lists/oss-security/2025/01/14/3
-	NOTE: https://github.com/RsyncProject/rsync/commit/589b0691e59f761ccb05ddb8e1124991440db2c7
+	NOTE: Fixed by: https://git.samba.org/?p=rsync.git;a=commit;h=589b0691e59f761ccb05ddb8e1124991440db2c7 (v3.4.0)
 CVE-2024-12084
 	- rsync 3.3.0+ds1-3
 	[bullseye] - rsync <not-affected> (Vulnerable code introduced later)
-	NOTE: Fixed by: https://git.samba.org/?p=rsync.git;a=commit;h=0902b52f6687b1f7952422080d50b93108742e53
+	NOTE: Fixed by: https://git.samba.org/?p=rsync.git;a=commit;h=0902b52f6687b1f7952422080d50b93108742e53 (v3.4.0)
+	NOTE: Fixed by: https://git.samba.org/?p=rsync.git;a=commit;h=42e2b56c4ede3ab164f9a5c6dae02aa84606a6c1 (v3.4.0)
 	NOTE: https://www.openwall.com/lists/oss-security/2025/01/14/3
 CVE-2025-23082 (Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request  ...)
 	NOT-FOR-US: Veeam



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1f239aba786c0b712d13f17b3e24779df7f587a2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1f239aba786c0b712d13f17b3e24779df7f587a2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250114/2e061ba8/attachment-0001.htm>