Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a13af993 by Moritz Muehlenhoff at 2024-04-25T16:49:52+02:00
new social-auth-app-django issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -129,7 +129,10 @@ CVE-2024-32948 (Missing Authorization vulnerability in
Repute Infosystems ARMemb
CVE-2024-32947 (Cross-Site Request Forgery (CSRF) vulnerability in
AlumniOnline Web Se ...)
NOT-FOR-US: WordPress plugin
CVE-2024-32879 (Python Social Auth is a social authentication/registration
mechanism. ...)
- TODO: check
+ - social-auth-app-django <unfixed>
+ - python-social-auth <removed>
+ NOTE:
https://github.com/python-social-auth/social-app-django/security/advisories/GHSA-2gr8-3wc7-xhj3
+ NOTE:
https://github.com/python-social-auth/social-app-django/commit/31c3e0c7edb187004d8abbde7e9c4f7ef9098138
(5.4.1)
CVE-2024-32876 (NewPipe is an Android app for video streaming written in Java.
It supp ...)
NOT-FOR-US: NewPipe Android app
CVE-2024-32875 (Hugo is a static site generator. Starting in version 0.123.0
and prior ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a13af993b6cc268d62dd773bdde58dd82700598d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a13af993b6cc268d62dd773bdde58dd82700598d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
