Re: CVE-2023-33460, ruby-yajl affected?

2023-07-05 Thread Anton Gladky
Thanks all for the discussion. @Tobias, thanks for marking the CVE in the list. Best regards Anton Am Mi., 5. Juli 2023 um 17:56 Uhr schrieb Tobias Frost : > On Wed, Jul 05, 2023 at 09:06:15AM +, Bastien Roucaričs wrote: > > Le mercredi 5 juillet 2023, 04:52:48 UTC Anton Gladk

CVE-2023-33460, ruby-yajl affected?

2023-07-04 Thread Anton Gladky
Hello, I am looking into CVE-2023-33460 and I am not sure that ruby-yajl is affected. There is no direct dependency on yajl, where the vulnerability was detected. Should ruby-yajl be unmarked as affected by this CVE? Thank you Anton

Re: c-ares, CVE-2023-31147, CVE-2023-31124

2023-06-23 Thread Anton Gladky
he > device that provide randomness in the system. > > I would have marked them as "minor issue". > > Cheers > > // Ola > > > On Fri, 23 Jun 2023 at 06:49, Anton Gladky wrote: > > > > Hi, > > > > two CVEs might be irrelevant fo

c-ares, CVE-2023-31147, CVE-2023-31124

2023-06-22 Thread Anton Gladky
Hi, two CVEs might be irrelevant for Debian systems. Can they be tagged as "unaffected"? Or we have some systems, where /dev/urandom is not existing? Thanks Anton

Bug#987283: Fixed

2023-05-29 Thread Anton Gladky
MR is merged https://salsa.debian.org/security-tracker-team/security-tracker/-/merge_requests/114 Anton

amd64-microcode_3.20181128.1+deb9u1 pre-approval request, CVE-2017-5715

2020-03-12 Thread Anton Gladky
version 3.20180515.1). + + -- Anton Gladky Thu, 12 Mar 2020 20:29:09 +0100 + +amd64-microcode (3.20181128.1) unstable; urgency=medium + + * New microcode update packages from AMD upstream: ++ New Microcodes: + sig 0x00800f82, patch id 0x0800820b, 2018-06-20 + * README: update for new release