c-ares, CVE-2023-31147, CVE-2023-31124

To: debian-security@lists.debian.org
Cc: Debian LTS <debian-lts@lists.debian.org>
Subject: c-ares, CVE-2023-31147, CVE-2023-31124
From: Anton Gladky <gladk@debian.org>
Date: Fri, 23 Jun 2023 06:48:23 +0200
Message-id: <[🔎] CALF6qJmVXsY_eKa-1UfxDP0-5CPcBqOguTD6O-_TTszgH2dOug@mail.gmail.com>

Hi,

two CVEs might be irrelevant for Debian systems. Can they be
tagged as "unaffected"? Or we have some systems, where
/dev/urandom is not existing?

Thanks

Anton

Reply to:

Follow-Ups:
- Re: c-ares, CVE-2023-31147, CVE-2023-31124
  - From: Moritz Muehlenhoff <jmm@inutil.org>
- Re: c-ares, CVE-2023-31147, CVE-2023-31124
  - From: Ola Lundqvist <ola@inguza.com>

Prev by Date: Re: #1036797 bullseye-pu: package mariadb-10.5 10.5.20-0+deb11u1
Next by Date: Re: c-ares, CVE-2023-31147, CVE-2023-31124
Previous by thread: Re: #1036797 bullseye-pu: package mariadb-10.5 10.5.20-0+deb11u1
Next by thread: Re: c-ares, CVE-2023-31147, CVE-2023-31124
Index(es):
- Date
- Thread