diff options
| author | Daniil Baturin <daniil@baturin.org> | 2025-04-12 16:55:02 +0100 |
|---|---|---|
| committer | Daniil Baturin <daniil@baturin.org> | 2025-04-12 16:59:17 +0100 |
| commit | e248eecb791f87901eaff7a2a2f0421bf6196409 (patch) | |
| tree | 6635f6daaf0bcd671e01aa56802c5ba35ced24d5 | |
| parent | 68cf70f0b79418d116105b2d1527acbe6a869baf (diff) | |
| download | community.vyos.net-e248eecb791f87901eaff7a2a2f0421bf6196409.tar.gz community.vyos.net-e248eecb791f87901eaff7a2a2f0421bf6196409.zip | |
Update the release status
| -rw-r--r-- | release-status.toml | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/release-status.toml b/release-status.toml index 8ecd998..225f01d 100644 --- a/release-status.toml +++ b/release-status.toml @@ -1,10 +1,10 @@ [release.sagitta] - latest = "1.4.1" + latest = "1.4.2" security_advisory = [ - {cve="CVE-2023-32728", title="RCE in Zabbix agent", description="Remote code execution in Zabbix agent via SMART plugin.", status="fixed"}, - {cve="CVE-2024-6387", title="regreSSHion", description="Potential remote code execution in OpenSSH server", status="fixed"}, - {cve="CVE-2024-53981", title="DoS in python-multipart", description="Remote attacker could potentially cause the HTTP API server to crash", status="fixed"} + {cve="CVE-2025-30095", title="Private key reuse in Dropbear SSH server", description="A Dropbear private key was included in the image at build time and not regenerated, making console server SSH connections vulnerable to MitM attacks..", status="fixed"}, + {cve="CVE-2023-32728", title="Code injection in zabbix_agent2 smartctl plugin", description="Certain configurations of Zabbix agent were vulnerable to remote code execution. This issue was previously fixed by a hotfix and is now included in the image.", status="Fixed"}, + {cve="CVE-2024-3596", title="Blast-RADIUS", description="The Blast-RADIUS vulnerability is present in 1.4.2 and will be fixed in subsequent releases. Make sure your routers are not communicating with RADIUS servers over untrusted networks.", status="Present"} ] notes = "Maintenance and security release" @@ -14,5 +14,5 @@ security_advisory = [] - notes = "Bugfix release" + notes = "Unsupported — VyOS 1.3 has reached end of life in April 2025." |