Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
46d47f94 by Salvatore Bonaccorso at 2025-08-24T09:00:22+02:00
Add Debian bug reference for CVE-2024-44905
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -21847,8 +21847,7 @@ CVE-2024-55567 (Improper input validation was
discovered in UsbCoreDxe in Insyde
CVE-2024-44906 (uptrace pgdriver v1.2.1 was discovered to contain a SQL
injection vuln ...)
NOT-FOR-US: uptrace pgdriver
CVE-2024-44905 (go-pg pg v10.13.0 was discovered to contain a SQL injection
vulnerabil ...)
- - golang-gopkg-pg.v5 <undetermined>
- TODO: check details
+ - golang-gopkg-pg.v5 <unfixed> (bug #1111939)
NOTE: https://github.com/advisories/GHSA-6xp3-p59p-q4fj
NOTE: Fixed by:
https://github.com/go-pg/pg/commit/eff50a43724e52347559687a6945c116afbb41c1
(v10.15.0)
CVE-2023-45256 (Multiple SQL injection vulnerabilities in the EuroInformation
Monetico ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/46d47f94100300d188be5695afc7110ce3944a57
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/46d47f94100300d188be5695afc7110ce3944a57
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
