Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
de35b247 by Salvatore Bonaccorso at 2024-10-29T19:19:50+01:00
Restore CVE-2023-42115
This was caused from a fallout of 98b9b7de9a0c ("Add some upstream tag
meta information to upstream commits") and then removed when reserving
the DLA for xorg-server in 9432b3045d5f ("Reserve DLA-3940-1 for
xorg-server").
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -98618,6 +98618,14 @@ CVE-2023-42116 (Exim SMTP Challenge Stack-based Buffer
Overflow Remote Code Exec
NOTE: https://exim.org/static/doc/security/CVE-2023-zdi.txt
CVE-2023-42115 (Exim AUTH Out-Of-Bounds Write Remote Code Execution
Vulnerability. Thi ...)
{DSA-5512-1}
+ - exim4 4.97~RC1-2
+ [buster] - exim4 <not-affected> (External authenticator support was
introduced later)
+ NOTE: https://www.zerodayinitiative.com/advisories/ZDI-23-1469/
+ NOTE: https://bugs.exim.org/show_bug.cgi?id=2999
+ NOTE:
https://git.exim.org/exim.git/log/refs/heads/exim-4.96%20security/exim.git/commit/955f1203c15be96fa84b5331fa2a5cb2e556b9a9
(exim-4.96.1)
+ NOTE: https://www.openwall.com/lists/oss-security/2023/09/29/5
+ NOTE: https://www.openwall.com/lists/oss-security/2023/10/01/4
+ NOTE: https://exim.org/static/doc/security/CVE-2023-zdi.txt
CVE-2023-42114 (Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure
Vulnerab ...)
{DSA-5512-1 DLA-3599-1}
- exim4 4.97~RC1-2
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/de35b247448c29d541b5295a41d2bba676fdf367
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/de35b247448c29d541b5295a41d2bba676fdf367
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
