Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f2404098 by Salvatore Bonaccorso at 2024-11-28T20:49:07+01:00
Update status for CVE-2024-5233{6,7}/tuned
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -256,12 +256,20 @@ CVE-2024-53267 (sigstore-java is a sigstore java client
for interacting with sig
NOT-FOR-US: sigstore-java
CVE-2024-52337 (A log spoofing flaw was found in the Tuned package due to
improper san ...)
- tuned <unfixed>
+ [bookworm] - tuned <not-affected> (Vulnerable code introduced later)
+ [bullseye] - tuned <not-affected> (Vulnerable code introduced later)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2324541
NOTE: https://www.openwall.com/lists/oss-security/2024/11/28/1
+ NOTE: Introduced with:
https://github.com/redhat-performance/tuned/commit/cddcd2336944a56e313324c699dd739fe8f1f85d
(v2.23.0)
+ NOTE: Fixed by:
https://github.com/redhat-performance/tuned/commit/90c24eea037c7a5e9414c93f8fb3e549ed4a7b06
(v2.24.1)
CVE-2024-52336 (A script injection vulnerability was identified in the Tuned
package. ...)
- tuned <unfixed>
+ [bookworm] - tuned <not-affected> (Vulnerable code introduced later)
+ [bullseye] - tuned <not-affected> (Vulnerable code introduced later)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2324540
NOTE: https://www.openwall.com/lists/oss-security/2024/11/28/1
+ NOTE: Introduced with:
https://github.com/redhat-performance/tuned/commit/cddcd2336944a56e313324c699dd739fe8f1f85d
(v2.23.0)
+ NOTE: Fixed by:
https://github.com/redhat-performance/tuned/commit/90c24eea037c7a5e9414c93f8fb3e549ed4a7b06
(v2.24.1)
CVE-2024-52008 (Fides is an open-source privacy engineering platform. The user
invite ...)
NOT-FOR-US: Fides
CVE-2024-51058 (Local File Inclusion (LFI) vulnerability has been discovered
in TCPDF ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f24040980d04c65021a3ee394c322634af1d898c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f24040980d04c65021a3ee394c322634af1d898c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
