You are not logged in.

#1 2024-03-28 03:12:06

wangwen
Member
Registered: 2024-03-28
Posts: 4

I have questions about the Issues release of the security module

I checked https://security.archlinux.org/issues/all in 2023 and saw AVG-525, but now I cannot find the latest announcement. Please tell me what's going on and where I can see the change announcement. Thank you.

Offline

#2 2024-03-28 03:19:33

wangwen
Member
Registered: 2024-03-28
Posts: 4

Re: I have questions about the Issues release of the security module

In addition, I found that the advisories in the issue are duplicated, such as AVG-699, AVG-698, AVG-697, AVG-696, AVG-695, AVG-694.

Offline

#3 2024-03-28 11:25:29

Lone_Wolf
Forum Moderator
From: Netherlands, Europe
Registered: 2005-10-04
Posts: 12,375

Re: I have questions about the Issues release of the security module

Not sure what you mean, avg-525 is fixed and still in the list . see https://security.archlinux.org/AVG-525 for details.

as for duplicate advisories :
avg-698 links to https://security.archlinux.org/ASA-201805-17 while avg-699 links to https://security.archlinux.org/ASA-201805-18
Those are 2 different advisories.


Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.

clean chroot building to complicated ?
Try clean chroot manager by graysky

Offline

#4 2024-03-29 01:32:13

wangwen
Member
Registered: 2024-03-28
Posts: 4

Re: I have questions about the Issues release of the security module

Thank you for your reply. Sorry, it was my writing error and improper description.

The first question I want to talk about should be avg-2525. I can’t find it at https://security.archlinux.org/issues/all

The second question is that I directly use https://security.archlinux.org/issues/all.json to download the json file, and the content of the advisories with key value AVG-699 is
"advisories": [
       "ASA-201805-18",
       "ASA-201805-18"
]

Offline

#5 2024-03-30 13:18:01

Lone_Wolf
Forum Moderator
From: Netherlands, Europe
Registered: 2005-10-04
Posts: 12,375

Re: I have questions about the Issues release of the security module

A1
https://security.archlinux.org/AVG-2525 is about opera and the opera package was removed from extra repo about a month ago .


A2
This is what I see after downloading the file just now. Please doublecheck .

 {
    "name": "AVG-699",
    "packages": [
      "libcurl-gnutls"
    ],
    "status": "Fixed",
    "severity": "Critical",
    "type": "multiple issues",
    "affected": "7.59.0-1",
    "fixed": "7.60.0-1",
    "ticket": null,
    "issues": [
      "CVE-2018-1000301",
      "CVE-2018-1000300"
    ],
    "advisories": [
      "ASA-201805-18"
    ]
  },

Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.

clean chroot building to complicated ?
Try clean chroot manager by graysky

Offline

#6 2024-04-01 06:53:50

wangwen
Member
Registered: 2024-03-28
Posts: 4

Re: I have questions about the Issues release of the security module

Ok, I get it now, thanks!

Offline

Board footer

Powered by FluxBB