[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: CVE-2023-38545 security fix not listed on NVD databse



If I remember correctly, this is not even a security bug. Blame NVD for that.


در ۳۱ ژانویهٔ ۲۰۲۴ ۱۲:۰۵:۰۰ (UTC)، Amar Adadande <amarstjit@gmail.com> نوشت:

Hi Team,

Here we are reaching out to bring to your attention a critical issue [CVE-2023-38545] that requires immediate attention. It has come to our notice that the recent fixes implemented in Debian as mentioned on tracker (https://security-tracker.debian.org/tracker/CVE-2023-38545) have not yet been updated in the National Vulnerability Database (NVD).

This lack of synchronization poses a potential risk to our system's security, as the NVD is a crucial resource for assessing and addressing vulnerabilities. The timely update of security information is paramount to ensuring the integrity and safety of our systems.

I kindly request your assistance in expediting the process of updating the Debian fixes in the NVD database. It is essential that the latest information is made available to the security community and organizations relying on this database for vulnerability management.


Reply to: