Adrian Bunk pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ab58d8a8 by Adrian Bunk at 2024-10-02T16:07:23+03:00
CVE-2024-0232/sqlite3 does not affect bookworm
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -71426,13 +71426,14 @@ CVE-2023-46749 (Apache Shiro before 1.13.0 or
2.0.0-alpha-4, may be susceptible
NOTE: https://www.openwall.com/lists/oss-security/2024/01/12/2
CVE-2024-0232 (A heap use-after-free issue has been identified in SQLite in
the jsonP ...)
- sqlite3 3.43.2-1
- [bookworm] - sqlite3 <no-dsa> (Minor issue)
+ [bookworm] - sqlite3 <not-affected> (Vulnerable code not present)
[bullseye] - sqlite3 <not-affected> (Vulnerable code not present)
[buster] - sqlite3 <not-affected> (Vulnerable code not present)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2243754
NOTE: https://sqlite.org/forum/forumpost/4aa381993a
NOTE: https://sqlite.org/forum/forumpost/b25edc1d46
NOTE: https://sqlite.org/src/info/a163fecca90cab9d (v3.43.2)
+ NOTE: Introduced by: https://sqlite.org/src/info/2dbb22c75e86f2e3
(v3.43.0)
CVE-2024-22494 (A stored XSS vulnerability exists in JFinalcms 5.0.0 via the
/gusetboo ...)
NOT-FOR-US: JFinalcms
CVE-2024-22493 (A stored XSS vulnerability exists in JFinalcms 5.0.0 via the
/gusetboo ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ab58d8a8362f1b7778f644858d3732b0f45df59e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ab58d8a8362f1b7778f644858d3732b0f45df59e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
