Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a685d81d by Salvatore Bonaccorso at 2024-08-24T10:31:43+02:00
Add youtuble-dl tracking for two CVEs originating form yt-dlp
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -13064,9 +13064,11 @@ CVE-2024-38537 (Fides is an open-source privacy
engineering platform. `fides.js`
NOT-FOR-US: Fides
CVE-2024-38519 (`yt-dlp` and `youtube-dl` are command-line audio/video
downloaders. Pr ...)
- yt-dlp 2024.07.01-1 (unimportant)
+ - youtube-dl <removed> (unimportant; bug #1079502)
NOTE:
https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-79w7-vh3h-8g4j
NOTE:
https://github.com/yt-dlp/yt-dlp/commit/5ce582448ececb8d9c30c8c31f58330090ced03a
(2024.07.01)
NOTE: https://securitylab.github.com/advisories/GHSL-2024-090_yt-dlp/
+ NOTE:
https://github.com/dirkf/youtube-dl/security/advisories/GHSA-22fp-mf44-f2mq
NOTE: Exploitable issue under Windows
CVE-2024-37185 (in OpenHarmony v4.0.0 and prior versions allow a remote
attacker arbit ...)
NOT-FOR-US: OpenHarmony
@@ -94976,10 +94978,13 @@ CVE-2023-35934 (yt-dlp is a command-line program to
download videos from video s
- yt-dlp 2023.07.06-1 (bug #1040595)
[bookworm] - yt-dlp <no-dsa> (Minor issue)
[bullseye] - yt-dlp <no-dsa> (Minor issue)
+ - youtube-dl <removed> (bug #1079502)
+ [bookworm] - youtube-dl <no-dsa> (Minor issue)
NOTE:
https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-v8mc-9377-rwjj
NOTE:
https://github.com/yt-dlp/yt-dlp/commit/1ceb657bdd254ad961489e5060f2ccc7d556b729
NOTE:
https://github.com/yt-dlp/yt-dlp/commit/3121512228487c9c690d3d39bfd2579addf96e07
NOTE:
https://github.com/yt-dlp/yt-dlp/commit/f8b4bcc0a791274223723488bfbfc23ea3276641
+ NOTE:
https://github.com/dirkf/youtube-dl/security/advisories/GHSA-9jqj-9wwh-r5mg
CVE-2023-34193 (File Upload vulnerability in Zimbra ZCS 8.8.15 allows an
authenticated ...)
NOT-FOR-US: Zimbra
CVE-2023-34192 (Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15
allows a rem ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a685d81df2362bff26454558d15af872f2c5f5ea
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a685d81df2362bff26454558d15af872f2c5f5ea
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
