Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
396351ae by Salvatore Bonaccorso at 2026-02-28T11:32:16+01:00
Update status for CVE-2024-36600/libcdio
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -200852,9 +200852,14 @@ CVE-2024-37182 (Mattermost Desktop App versions
<=5.7.0 fail to correctly prompt
CVE-2024-36656 (In MintHCM 4.0.3, a registered user can execute arbitrary
JavaScript c ...)
NOT-FOR-US: MintHCM
CVE-2024-36600 (Buffer Overflow Vulnerability in libcdio 2.2.0 (fixed in
2.3.0) allows ...)
- - libcdio <not-affected> (Vulnerable code introduced later in
development version)
+ - libcdio <unfixed>
+ [trixie] - libcdio <no-dsa> (Can be fixed via point release)
+ [bookworm] - libcdio <not-affected> (Vulnerable code not present)
+ [bullseye] - libcdio <not-affected> (Vulnerable code not present)
NOTE: https://github.com/gashasbi/My-Reports/tree/main/CVE-2024-36600
- NOTE: Introduced by:
https://git.savannah.gnu.org/cgit/libcdio.git/commit/?id=4c840665c6d9cf2ff1cf0cd12f91b25030776c74
(master)
+ NOTE: Introduced by:
https://github.com/libcdio/libcdio/commit/4c840665c6d9cf2ff1cf0cd12f91b25030776c74
(2.1.1)
+ NOTE: https://github.com/libcdio/libcdio/pull/32
+ NOTE: Fixed by:
https://github.com/libcdio/libcdio/commit/417478a7474af41c27ab3f876f31783fa06a5dbc
(2.2.1.rc1)
NOTE:
https://lists.gnu.org/archive/html/libcdio-devel/2024-04/msg00000.html
NOTE:
https://lists.gnu.org/archive/html/libcdio-devel/2024-05/msg00005.html
CVE-2024-36599 (A cross-site scripting (XSS) vulnerability in Aegon Life v1.0
allows a ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/396351aefa7375bd0064d029dac2760d535ee86f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/396351aefa7375bd0064d029dac2760d535ee86f
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
