Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
068616e5 by Salvatore Bonaccorso at 2024-05-07T17:36:09+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -154,13 +154,13 @@ CVE-2024-34538 (Mateso PasswordSafe through 8.13.9.26689
has Weak Cryptography.)
CVE-2024-34529 (Nebari through 2024.4.1 prints the temporary Keycloak root
password.)
NOT-FOR-US: Nebari
CVE-2024-34528 (WordOps through 3.20.0 has a wo/cli/plugins/stack_pref.py
TOCTOU race ...)
- TODO: check
+ NOT-FOR-US: WordOps
CVE-2024-34527 (spaces_plugin/app.py in SolidUI 0.4.0 has an unnecessary print
stateme ...)
NOT-FOR-US: SolidUI
CVE-2024-34525 (FileCodeBox 2.0 stores a OneDrive password and AWS key in a
cleartext ...)
NOT-FOR-US: FileCodeBox
CVE-2024-34524 (In XLANG OpenAgents through fe73ac4, the allowed_file
protection mecha ...)
- TODO: check
+ NOT-FOR-US: XLANG OpenAgents
CVE-2024-34519 (Avantra Server 24.x before 24.0.7 and 24.1.x before 24.1.1
mishandles ...)
NOT-FOR-US: Avantra Server
CVE-2024-34515 (image-optimizer before 1.7.3 allows PHAR deserialization,
e.g., the ph ...)
@@ -220,15 +220,15 @@ CVE-2024-34367 (Cross-Site Request Forgery (CSRF)
vulnerability in Popup Box Tea
CVE-2024-34366 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
NOT-FOR-US: WordPress plugin
CVE-2024-34252 (wasm3 v0.5.0 was discovered to contain a global buffer
overflow which ...)
- TODO: check
+ NOT-FOR-US: wasm3
CVE-2024-34251 (An out-of-bound memory read vulnerability was discovered in
Bytecode A ...)
TODO: check
CVE-2024-34250 (A heap buffer overflow vulnerability was discovered in
Bytecode Allian ...)
TODO: check
CVE-2024-34249 (wasm3 v0.5.0 was discovered to contain a heap buffer overflow
which le ...)
- TODO: check
+ NOT-FOR-US: wasm3
CVE-2024-34246 (wasm3 v0.5.0 was discovered to contain an out-of-bound memory
read whi ...)
- TODO: check
+ NOT-FOR-US: wasm3
CVE-2024-34093 (An issue was discovered in Archer Platform 6 before 2024.03.
There is ...)
NOT-FOR-US: Archer Platform
CVE-2024-34092 (An issue was discovered in Archer Platform 6 before 2024.04.
Authentic ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/068616e5bb44b2c271d878eda59e7bc61c8e32b7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/068616e5bb44b2c271d878eda59e7bc61c8e32b7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
