Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker
Commits:
82e14f5c by Chris Lamb at 2024-09-23T11:00:36-07:00
Retriage CVE-2024-21633/apktool for bullseye LTS.
- - - - -
a323d320 by Chris Lamb at 2024-09-23T11:01:50-07:00
Retriage CVE-2024-6126/cockpit for bullseye LTS.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -18747,7 +18747,7 @@ CVE-2024-6426 (Information exposure vulnerability in
MESbook 20221021.03 version
CVE-2024-6126 (A flaw was found in the cockpit package. This flaw allows an
authentic ...)
- cockpit 320-1
[bookworm] - cockpit 287.1-0+deb12u3
- [bullseye] - cockpit <no-dsa> (Minor issue)
+ [bullseye] - cockpit <postponed> (Minor issue)
NOTE: Fixed by:
https://github.com/cockpit-project/cockpit/commit/08965365ac311f906a520cbf65427742d5f84ba4
(320)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2292897
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2290859
@@ -71710,7 +71710,7 @@ CVE-2024-21622 (Craft is a content management system.
This is a potential modera
CVE-2024-0217 (A use-after-free flaw was found in PackageKitd. In some
conditions, th ...)
- packagekit <unfixed> (bug #1060016)
[bookworm] - packagekit <no-dsa> (Minor issue)
- [bullseye] - packagekit <no-dsa> (Minor issue)
+ [bullseye] - packagekit <postponed> (Minor issue)
[buster] - packagekit <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2256624
NOTE: Reducing impact via:
https://github.com/PackageKit/PackageKit/commit/64278c9127e3333342b56ead99556161f7e86f79
(v1.2.7)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/3199ba3abcba6b49b5606f19da8fb54d097db8cf...a323d3207153906e77bfab8e1f2839d53894485f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/3199ba3abcba6b49b5606f19da8fb54d097db8cf...a323d3207153906e77bfab8e1f2839d53894485f
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
