Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
1a3a0935 by Salvatore Bonaccorso at 2024-06-05T20:57:02+02:00
Add references to commits for CVE-2024-5171/aom and CVE-2024-5197/libvpx

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -410,9 +410,14 @@ CVE-2024-5214
 CVE-2024-5171
        - aom 3.8.2-3
        NOTE: https://issues.chromium.org/issues/332382766
+       NOTE: 
https://aomedia.googlesource.com/aom/+/19d9966572a410804349e1a8ee2017fed49a6dab
+       NOTE: 
https://aomedia.googlesource.com/aom/+/8156fb76d88845d716867d20333fd27001be47a8
 CVE-2024-5197 (There exists interger overflows in libvpx in versions prior to 
1.14.1. ...)
        - libvpx 1.14.1-1
        NOTE: https://issues.chromium.org/issues/332382766
+       NOTE: 
https://github.com/webmproject/libvpx/commit/c5640e3300690705c336966e2a8bb346a388c829
+       NOTE: 
https://github.com/webmproject/libvpx/commit/9d7054c0cb83665a74cf6f59b6261f455e692149
+       NOTE: 
https://github.com/webmproject/libvpx/commit/61c4d556bd03b97d84e3fa49180d14bde5a62baa
 CVE-2024-4540 (A flaw was found in Keycloak in OAuth 2.0 Pushed Authorization 
Request ...)
        NOT-FOR-US: Keycloak
 CVE-2024-4332 (An authentication bypass vulnerability has been identified in 
the REST ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1a3a0935b56f54ebcc6272dd685fdc6f236351cf

-- 
This project does not include diff previews in email notifications.
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1a3a0935b56f54ebcc6272dd685fdc6f236351cf
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to