Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fb431cc7 by Salvatore Bonaccorso at 2024-02-26T21:30:06+01:00
Process three new krb5 issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -21,11 +21,17 @@ CVE-2024-26466 (A DOM based cross-site scripting (XSS)
vulnerability in the comp
CVE-2024-26465 (A DOM based cross-site scripting (XSS) vulnerability in the
component ...)
TODO: check
CVE-2024-26462 (Kerberos 5 (aka krb5) 1.21.2 contains a memory leak
vulnerability in / ...)
- TODO: check
+ - krb5 <unfixed>
+ NOTE:
https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_3.md
+ TODO: check, unclear upstream report status
CVE-2024-26461 (Kerberos 5 (aka krb5) 1.21.2 contains a memory leak
vulnerability in / ...)
- TODO: check
+ - krb5 <unfixed>
+ NOTE:
https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md
+ TODO: check, unclear upstream report status
CVE-2024-26458 (Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in
/krb5/src/lib/r ...)
- TODO: check
+ - krb5 <unfixed>
+ NOTE:
https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_1.md
+ NOTE: check, unclear upstream report status
CVE-2024-26455 (fluent-bit 2.2.2 contains a Use-After-Free vulnerability in
/fluent-bi ...)
TODO: check
CVE-2024-25925 (Unrestricted Upload of File with Dangerous Type vulnerability
in SYSBA ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fb431cc79f8f7215b77a58aaeecc9afce9401b84
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fb431cc79f8f7215b77a58aaeecc9afce9401b84
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
