Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7c871190 by Salvatore Bonaccorso at 2025-04-17T20:37:09+02:00
Add CVE-2024-58249/wxwidgets3.2
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -471,7 +471,9 @@ CVE-2025-1981 (Improper neutralization of input provided by
a low-privileged use
CVE-2025-1980 (The Ready_ application's Profile section allows users to upload
files ...)
NOT-FOR-US: Ready OS
CVE-2024-58249 (In wxWidgets before 3.2.7, a crash can be triggered in
wxWidgets apps ...)
- TODO: check
+ - wxwidgets3.2 3.2.7+dfsg-1
+ NOTE: https://github.com/wxWidgets/wxWidgets/issues/24885
+ NOTE:
https://github.com/wxWidgets/wxWidgets/commit/f2918a9ac823074901ce27de939baa57788beb3d
(v3.2.7)
CVE-2024-58248 (nopCommerce before 4.80.0 does not offer locking for order
placement. ...)
NOT-FOR-US: nopCommerce
CVE-2024-56736 (Server-Side Request Forgery (SSRF) vulnerability in Apache
HertzBeat. ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7c871190eacdaaa6006592e7e7230e5c146b501f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7c871190eacdaaa6006592e7e7230e5c146b501f
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
