Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6b354347 by Salvatore Bonaccorso at 2024-07-02T23:03:02+02:00
Add CVE-2024-39894/openssh
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -41,7 +41,11 @@ CVE-2024-4268 (The Ultimate Blocks \u2013 WordPress Blocks
Plugin plugin for Wor
CVE-2024-3826 (In versions of Akana in versions prior to and including
2022.1.3 valid ...)
TODO: check
CVE-2024-39894 (OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing
attacks aga ...)
- TODO: check
+ - openssh <unfixed>
+ [bookworm] - openssh <not-affected> (Vulnerable code not present)
+ [bullseye] - openssh <not-affected> (Vulnerable code not present)
+ NOTE:
https://lists.mindrot.org/pipermail/openssh-unix-announce/2024-July/000158.html
+ NOTE: https://www.openwall.com/lists/oss-security/2024/07/02/1
CVE-2024-39891 (In the Twilio Authy API, accessed by Authy Android before
25.1.0 and A ...)
NOT-FOR-US: Twilio Authy API
CVE-2024-39323 (aimeos/ai-admin-graphql is the Aimeos GraphQL API admin
interface. Sta ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6b3543472d51ba7d3a721e17fca72d89b4ae1945
--
This project does not include diff previews in email notifications.
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6b3543472d51ba7d3a721e17fca72d89b4ae1945
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
