Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 70e81e6f by Salvatore Bonaccorso at 2024-02-08T07:15:59+01:00 Add four new gitlab CVEs - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,15 @@ +CVE-2024-1066 [Resource exhaustion using GraphQL vulnerabilitiesCountByDay] + - gitlab <unfixed> + NOTE: https://about.gitlab.com/releases/2024/02/07/security-release-gitlab-16-8-2-released/#resource-exhaustion-using-graphql-vulnerabilitiescountbyday +CVE-2023-6386 [ReDoS in CI/CD Pipeline Editor while verifying Pipeline syntax] + - gitlab <unfixed> + NOTE: https://about.gitlab.com/releases/2024/02/07/security-release-gitlab-16-8-2-released/#redos-in-ci/cd-pipeline-editor-while-verifying-pipeline-syntax +CVE-2023-6840 [Project maintainers can bypass group's scan result policy block_branch_modification setting] + - gitlab <unfixed> + NOTE: https://about.gitlab.com/releases/2024/02/07/security-release-gitlab-16-8-2-released/#project-maintainers-can-bypass-groups-scan-result-policy-block_branch_modification-setting +CVE-2024-1250 [Restrict group access token creation for custom roles] + - gitlab <not-affected> (Only affects 16.8.y) + NOTE: https://about.gitlab.com/releases/2024/02/07/security-release-gitlab-16-8-2-released/#restrict-group-access-token-creation-for-custom-roles CVE-2024-25201 (Espruino 2v20 (commit fcc9ba4) was discovered to contain an Out-of-bou ...) NOT-FOR-US: Espruino CVE-2024-25200 (Espruino 2v20 (commit fcc9ba4) was discovered to contain a Stack Overf ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/70e81e6f5bf4590e20ffec101375d945452cf831 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/70e81e6f5bf4590e20ffec101375d945452cf831 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
