Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
61b40a53 by Salvatore Bonaccorso at 2024-07-03T07:10:39+02:00
Add CVE-2024-38519/yt-dlp
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -66,7 +66,11 @@ CVE-2024-38857 (Improper neutralization of input in Checkmk
before versions 2.3.
CVE-2024-38537 (Fides is an open-source privacy engineering platform.
`fides.js`, a cl ...)
TODO: check
CVE-2024-38519 (`yt-dlp` is a command-line audio/video downloader. Prior to
version 20 ...)
- TODO: check
+ - yt-dlp 2024.07.01-1 (unimportant)
+ NOTE:
https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-79w7-vh3h-8g4j
+ NOTE:
https://github.com/yt-dlp/yt-dlp/commit/5ce582448ececb8d9c30c8c31f58330090ced03a
(2024.07.01)
+ NOTE: https://securitylab.github.com/advisories/GHSL-2024-090_yt-dlp/
+ NOTE: Exploitable issue under Windows
CVE-2024-37185 (in OpenHarmony v4.0.0 and prior versions allow a remote
attacker arbit ...)
TODO: check
CVE-2024-37077 (in OpenHarmony v4.0.0 and prior versions allow a remote
attacker arbit ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/61b40a533d73d0946c9c5780f8b7db4aecaa943e
--
This project does not include diff previews in email notifications.
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/61b40a533d73d0946c9c5780f8b7db4aecaa943e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
