Re: 2 CVEs in amanda-3.5.1

"Stefan G. Weichinger" <[email protected]> Mon, 13 Feb 2023 11:25:01 +0100

Newsgroups	gmane.comp.archivers.amanda.user,gmane.comp.archivers.amanda.devel
Message-ID	<[email protected]>

Am 22.01.23 um 09:25 schrieb Stefan G. Weichinger:
> 
> Just in case this hasn't yet been noticed by anyone upstream:
> 
> https://github.com/MaherAzzouzi/CVE-2022-37704
> 
> https://github.com/MaherAzzouzi/CVE-2022-37705
> 
> https://github.com/zmanda/amanda/issues/192

PRs on their way, as it seems:

https://github.com/zmanda/amanda/pull/197

https://github.com/zmanda/amanda/pull/198


I asked for distro packages, read this:

https://github.com/zmanda/amanda/issues/192#issuecomment-1427097294

Maybe it helps to cheer for the packages there (vote/like/ask there?).