Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
27d491ff by Salvatore Bonaccorso at 2026-02-02T08:38:05+01:00
Add CVE-2026-24400/assertj-core
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1823,7 +1823,9 @@ CVE-2026-24470 (Skipper is an HTTP router and reverse
proxy for service composit
CVE-2026-24408 (sigstore-python is a Python tool for generating and verifying
Sigstore ...)
- sigstore-python <itp> (bug #1084157)
CVE-2026-24400 (AssertJ provides Fluent testing assertions for Java and the
Java Virtu ...)
- TODO: check
+ - assertj-core <unfixed>
+ NOTE:
https://github.com/assertj/assertj/security/advisories/GHSA-rqfh-9r24-8c9r
+ NOTE:
https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a
(assertj-build-3.27.7)
CVE-2026-24131 (pnpm is a package manager. Prior to version 10.28.2, when pnpm
process ...)
- pnpm <itp> (bug #985669)
CVE-2026-24123 (BentoML is a Python library for building online serving
systems optimi ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27d491ff5f8f87fc205072318365e45289835039
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27d491ff5f8f87fc205072318365e45289835039
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
