Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7f0f72d8 by Salvatore Bonaccorso at 2025-03-15T10:33:25+01:00
Update status for ofono issues in unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -63253,16 +63253,19 @@ CVE-2024-7539 (oFono CUSD Stack-based Buffer Overflow
Code Execution Vulnerabili
[bullseye] - ofono <postponed> (Revisit when/if fixed upstream)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-24-1079/
NOTE:
https://git.kernel.org/pub/scm/network/ofono/ofono.git/commit/?id=389e2344f86319265fb72ae590b470716e038fdc
+ NOTE:
https://lore.kernel.org/ofono/dm5pr0102mb3477ef696990e9af7889158680...@dm5pr0102mb3477.prod.exchangelabs.com/
CVE-2024-7538 (oFono CUSD AT Command Stack-based Buffer Overflow Code
Execution Vulne ...)
- - ofono <unfixed> (bug #1078555)
+ - ofono 2.14-1 (bug #1078555)
[bookworm] - ofono <postponed> (Revisit when/if fixed upstream)
[bullseye] - ofono <postponed> (Revisit when/if fixed upstream)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-24-1078/
+ NOTE:
https://lore.kernel.org/ofono/byapr01mb3830cc0a4ca324706691f19380...@byapr01mb3830.prod.exchangelabs.com/
CVE-2024-7537 (oFono QMI SMS Handling Out-Of-Bounds Read Information
Disclosure Vulne ...)
- ofono <unfixed> (bug #1099190)
[bookworm] - ofono <postponed> (Revisit when/if fixed upstream)
[bullseye] - ofono <postponed> (Revisit when/if fixed upstream)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-24-1077/
+ NOTE:
https://lore.kernel.org/ofono/byapr01mb3830b08e8db1d76a9a85b07680...@byapr01mb3830.prod.exchangelabs.com/T/#u
CVE-2024-7006 (A null pointer dereference flaw was found in Libtiff via
`tif_dirinfo. ...)
{DLA-4026-1}
- tiff 4.5.1+git230720-5 (bug #1078648)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7f0f72d8510c108f73c86e4574fe214536997458
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7f0f72d8510c108f73c86e4574fe214536997458
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
