Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
871286b4 by Salvatore Bonaccorso at 2024-06-13T08:22:40+02:00
Add Debian bug references for CVE-2024-3524{1,2}/composer
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -737,12 +737,12 @@ CVE-2024-36302 (An origin validation vulnerability in the
Trend Micro Apex One s
CVE-2024-35329 (libyaml 0.2.5 is vulnerable to a heap-based Buffer Overflow in
yaml_do ...)
NOTE: disputed libyaml issue, to be rejected
CVE-2024-35242 (Composer is a dependency manager for PHP. On the 2.x branch
prior to v ...)
- - composer <unfixed>
+ - composer <unfixed> (bug #1073126)
NOTE:
https://github.com/composer/composer/security/advisories/GHSA-v9qv-c7wm-wgmf
NOTE:
https://github.com/composer/composer/commit/fc57b93603d7d90b71ca8ec77b1c8a9171fdb467
(2.2.24)
NOTE:
https://github.com/composer/composer/commit/6bd43dff859c597c09bd03a7e7d6443822d0a396
(2.7.7)
CVE-2024-35241 (Composer is a dependency manager for PHP. On the 2.x branch
prior to v ...)
- - composer <unfixed>
+ - composer <unfixed> (bug #1073125)
NOTE:
https://github.com/composer/composer/security/advisories/GHSA-47f6-5gq3-vx9c
NOTE:
https://github.com/composer/composer/commit/b93fc6ca437da35ae73d667d0618749c763b67d4
(2.2.24)
NOTE:
https://github.com/composer/composer/commit/ee28354ca8d33c15949ad7de2ce6656ba3f68704
(2.7.7)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/871286b4a2b870ff9bc03e4f20d2b51b03a3593e
--
This project does not include diff previews in email notifications.
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/871286b4a2b870ff9bc03e4f20d2b51b03a3593e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
