Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
07196966 by Salvatore Bonaccorso at 2024-08-23T21:34:02+02:00
Bookworm triage for python-django issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4630,18 +4630,22 @@ CVE-2024-7518 (Select options could obscure the
fullscreen notification dialog.
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-33/#CVE-2024-7518
CVE-2024-42005 (An issue was discovered in Django 5.0 before 5.0.8 and 4.2
before 4.2. ...)
- python-django 3:4.2.15-1 (bug #1078074)
+ [bookworm] - python-django <no-dsa> (Minor issue)
NOTE:
https://www.djangoproject.com/weblog/2024/aug/06/security-releases/
NOTE:
https://github.com/django/django/commit/f4af67b9b41e0f4c117a8741da3abbd1c869ab28/
(4.2.15)
CVE-2024-41991 (An issue was discovered in Django 5.0 before 5.0.8 and 4.2
before 4.2. ...)
- python-django 3:4.2.15-1 (bug #1078074)
+ [bookworm] - python-django <no-dsa> (Minor issue)
NOTE:
https://www.djangoproject.com/weblog/2024/aug/06/security-releases/
NOTE:
https://github.com/django/django/commit/efea1ef7e2190e3f77ca0651b5458297bc0f6a9f/
(4.2.15)
CVE-2024-41990 (An issue was discovered in Django 5.0 before 5.0.8 and 4.2
before 4.2. ...)
- python-django 3:4.2.15-1 (bug #1078074)
+ [bookworm] - python-django <no-dsa> (Minor issue; intrusive to backport)
NOTE:
https://www.djangoproject.com/weblog/2024/aug/06/security-releases/
NOTE:
https://github.com/django/django/commit/d0a82e26a74940bf0c78204933c3bdd6a283eb88/
(4.2.15)
CVE-2024-41989 (An issue was discovered in Django 5.0 before 5.0.8 and 4.2
before 4.2. ...)
- python-django 3:4.2.15-1 (bug #1078074)
+ [bookworm] - python-django <no-dsa> (Minor issue)
NOTE:
https://www.djangoproject.com/weblog/2024/aug/06/security-releases/
NOTE:
https://github.com/django/django/commit/fc76660f589ac07e45e9cd34ccb8087aeb11904b/
(4.2.15)
CVE-2024-42062 (CloudStack account-users by default use username and password
based au ...)
@@ -11031,14 +11035,17 @@ CVE-2024-39880 (Delta Electronics CNCSoft-G2 lacks
proper validation of the leng
NOT-FOR-US: Delta Electronics
CVE-2024-39614 (An issue was discovered in Django 5.0 before 5.0.7 and 4.2
before 4.2. ...)
- python-django 3:4.2.14-1 (bug #1076069)
+ [bookworm] - python-django <no-dsa> (Minor issue)
NOTE:
https://www.djangoproject.com/weblog/2024/jul/09/security-releases/
NOTE:
https://github.com/django/django/commit/17358fb35fb7217423d4c4877ccb6d1a3a40b1c3
(4.2.14)
CVE-2024-39330 (An issue was discovered in Django 5.0 before 5.0.7 and 4.2
before 4.2. ...)
- python-django 3:4.2.14-1 (bug #1076069)
+ [bookworm] - python-django <no-dsa> (Minor issue)
NOTE:
https://www.djangoproject.com/weblog/2024/jul/09/security-releases/
NOTE:
https://github.com/django/django/commit/2b00edc0151a660d1eb86da4059904a0fc4e095e
(4.2.14)
CVE-2024-39329 (An issue was discovered in Django 5.0 before 5.0.7 and 4.2
before 4.2. ...)
- python-django 3:4.2.14-1 (bug #1076069)
+ [bookworm] - python-django <no-dsa> (Minor issue)
NOTE:
https://www.djangoproject.com/weblog/2024/jul/09/security-releases/
NOTE:
https://github.com/django/django/commit/156d3186c96e3ec2ca73b8b25dc2ef366e38df14
(4.2.14)
CVE-2024-39181 (Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 was
discovered ...)
@@ -11057,6 +11064,7 @@ CVE-2024-38959 (Cross Site Scripting vulnerability in
Creativeitem Academy LMS L
NOT-FOR-US: Creativeitem Academy LMS Learning Management System
CVE-2024-38875 (An issue was discovered in Django 4.2 before 4.2.14 and 5.0
before 5.0 ...)
- python-django 3:4.2.14-1 (bug #1076069)
+ [bookworm] - python-django <no-dsa> (Minor issue; intrusive to backport)
NOTE:
https://www.djangoproject.com/weblog/2024/jul/09/security-releases/
NOTE:
https://github.com/django/django/commit/79f368764295df109a37192f6182fb6f361d85b5
(4.2.14)
CVE-2024-38301 (Dell Alienware Command Center, version 5.7.3.0 and prior,
contains an ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/07196966b7c78e3f182827360a42e2a419f8f7fd
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/07196966b7c78e3f182827360a42e2a419f8f7fd
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
