Tobias Frost pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
226f20c9 by Tobias Frost at 2024-09-29T18:42:50+02:00
CVE-2024-22120/zabbix identified patch
Upstream ticket ZBX-24505 -> Changelog entry text matched to git log finds
upstream dev ticket DEV-3121, finds the commits.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -35210,6 +35210,8 @@ CVE-2024-22120 (Zabbix server can perform command
execution for configured scrip
- zabbix 1:6.0.29+dfsg-1 (bug #1072120)
[buster] - zabbix <not-affected> (Vulnerable code introduced later)
NOTE: https://support.zabbix.com/browse/ZBX-24505
+ NOTE: fixed by
https://github.com/zabbix/zabbix/commit/9013ff74985e40aee6b58e2ed67675b87cab0879
(7.0.0beta2)
+ NOTE: fixed by
https://github.com/zabbix/zabbix/commit/c8ac414ff44127c3e8781eb029f519c060f623fa
(6.0.28rc1)
CVE-2024-21746 (Authentication Bypass by Spoofing vulnerability in Wpmet Wp
Ultimate R ...)
NOT-FOR-US: WordPress plugin
CVE-2023-5597 (A stored Cross-site Scripting (XSS) vulnerability affecting
3DDashboar ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/226f20c9b353230533123a0effe63bb2ccf2c6b7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/226f20c9b353230533123a0effe63bb2ccf2c6b7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
