Arch Linux

wangwen

Member

Registered: 2024-03-28

Posts: 4

I have questions about the Issues release of the security module

I checked https://security.archlinux.org/issues/all in 2023 and saw AVG-525, but now I cannot find the latest announcement. Please tell me what's going on and where I can see the change announcement. Thank you.

wangwen

Member

Registered: 2024-03-28

Posts: 4

Re: I have questions about the Issues release of the security module

In addition, I found that the advisories in the issue are duplicated, such as AVG-699, AVG-698, AVG-697, AVG-696, AVG-695, AVG-694.

Lone_Wolf

Forum Moderator

From: Netherlands, Europe

Registered: 2005-10-04

Posts: 11,952

Re: I have questions about the Issues release of the security module

Not sure what you mean, avg-525 is fixed and still in the list . see https://security.archlinux.org/AVG-525 for details.

as for duplicate advisories :
avg-698 links to https://security.archlinux.org/ASA-201805-17 while avg-699 links to https://security.archlinux.org/ASA-201805-18
Those are 2 different advisories.

---

Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.

(A works at time B)  && (time C > time B ) ≠  (A works at time C)

wangwen

Member

Registered: 2024-03-28

Posts: 4

Re: I have questions about the Issues release of the security module

Thank you for your reply. Sorry, it was my writing error and improper description.

The first question I want to talk about should be avg-2525. I can’t find it at https://security.archlinux.org/issues/all

The second question is that I directly use https://security.archlinux.org/issues/all.json to download the json file, and the content of the advisories with key value AVG-699 is
"advisories": [
       "ASA-201805-18",
       "ASA-201805-18"
]

Lone_Wolf

Forum Moderator

From: Netherlands, Europe

Registered: 2005-10-04

Posts: 11,952

Re: I have questions about the Issues release of the security module

A1
https://security.archlinux.org/AVG-2525 is about opera and the opera package was removed from extra repo about a month ago .

A2
This is what I see after downloading the file just now. Please doublecheck .

 {
    "name": "AVG-699",
    "packages": [
      "libcurl-gnutls"
    ],
    "status": "Fixed",
    "severity": "Critical",
    "type": "multiple issues",
    "affected": "7.59.0-1",
    "fixed": "7.60.0-1",
    "ticket": null,
    "issues": [
      "CVE-2018-1000301",
      "CVE-2018-1000300"
    ],
    "advisories": [
      "ASA-201805-18"
    ]
  },

---

Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.

(A works at time B)  && (time C > time B ) ≠  (A works at time C)

wangwen

Member

Registered: 2024-03-28

Posts: 4

Re: I have questions about the Issues release of the security module

Ok, I get it now, thanks！