Tobias Frost pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ddf8de05 by Tobias Frost at 2025-04-18T17:42:11+02:00
CVE-2024-36469/zabbix pinpoint fixing commits
(internal upstream ticket DEV-3009)
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6135,6 +6135,9 @@ CVE-2024-39780 (A YAML deserialization vulnerability was
found in the Robot Oper
CVE-2024-36469 (Execution time for an unsuccessful login differs when using a
non-exis ...)
- zabbix 1:7.0.9+dfsg-1
NOTE: https://support.zabbix.com/browse/ZBX-2625
+ NOTE: fixed by (merge commit)
https://github.com/zabbix/zabbix/commit/5193aba71cd6db8f0d7e53f88eb6e6e5b7c88102
(7.0.9rc1)
+ NOTE: fixed by (merge commit)
https://github.com/zabbix/zabbix/commit/4735c3bac34036fd70c57b5f057da0e27c9cb2b4
(6.0.38rc1)
+ NOTE: Fixed by (merge commit)
https://github.com/zabbix/zabbix/commit/6c5186ae53db12dcd0426ef85c147d4a83a9cca4
(5.0.46rc1)
CVE-2024-36465 (A low privilege (regular) Zabbix user with API access can use
SQL inje ...)
- zabbix 1:7.0.9+dfsg-1
[bookworm] - zabbix <not-affected> (Vulnerable code introduced later)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ddf8de0596b41cf915893cb9fd15012611aa92ad
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ddf8de0596b41cf915893cb9fd15012611aa92ad
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
