Adrian Bunk pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ab5781fd by Adrian Bunk at 2025-04-27T17:27:06+03:00
CVE-2024-58250/ppp: Ignore, as agreed with the security team
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -1101,7 +1101,8 @@ CVE-2024-13569 (The Front End Users WordPress plugin
through 3.2.32 does not san
NOT-FOR-US: WordPress plugin
CVE-2024-58250 (The passprompt plugin in pppd in ppp before 2.5.2 mishandles
privilege ...)
- ppp 2.5.2-1+1
- [bookworm] - ppp <no-dsa> (Minor issue)
+ [bookworm] - ppp <ignored> (plugin removal may break existing
configurations)
+ [bullseye] - ppp <ignored> (plugin removal may break existing
configurations)
NOTE: Fixed by:
https://github.com/ppp-project/ppp/commit/0a66ad22e54c72690ec2a29a019767c55c5281fc
(v2.5.2)
NOTE: Fix removes the passprompt plugin (can be replaced using
passwordfd plugin, may break existing
NOTE: configurations)
=====================================
data/dla-needed.txt
=====================================
@@ -286,10 +286,6 @@ poppler (Adrian Bunk)
NOTE: 20250412: Fix postponed CVEs (Beuc/front-desk)
NOTE: 20250413: bookworm update submitted, bullseye will be published after
that (bunk)
--
-ppp (Adrian Bunk)
- NOTE: 20250422: Added by Front-Desk (rouca)
- NOTE: 20250422: Will need a NEWS.Debian file, may break config (rouca)
---
python-flask-cors
NOTE: 20250422: Added by Front-Desk (rouca)
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ab5781fd543e4284c4f4f263f1b65d28dc832d71
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ab5781fd543e4284c4f4f263f1b65d28dc832d71
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
