Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a1518d61 by Salvatore Bonaccorso at 2024-11-29T22:13:47+01:00
Add two new symfony issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -91,9 +91,12 @@ CVE-2024-36615 (FFmpeg n7.0 has a race condition
vulnerability in the VP9 decode
CVE-2024-36612 (Zulip from 8.0 to 8.3 contains a memory leak vulnerability in
the hand ...)
NOT-FOR-US: Zulip
CVE-2024-36611 (In Symfony v7.07, a security vulnerability was identified in
the FormL ...)
- TODO: check
+ [experimental] - symfony 7.1.0~beta1+dfsg-1
+ - symfony <unfixed>
+ NOTE:
https://github.com/symfony/symfony/commit/a804ca15fcad279d7727b91d12a667fd5b925995
(v7.1.0-BETA1)
CVE-2024-36610 (A deserialization vulnerability exists in the Stub class of
the VarDum ...)
- TODO: check
+ - symfony 6.4.4+dfsg-3
+ NOTE: Fixed by:
https://github.com/symfony/symfony/commit/3ffd495bb3cc4d2e24e35b2d83c5b909cab7e259
(v6.4.4)
CVE-2024-35371 (Ant-Media-Serverv2.8.2 is affected by Improper Output
Neutralization f ...)
NOT-FOR-US: Ant-Media-Server
CVE-2024-35369 (In FFmpeg version n6.1.1, specifically within the
avcodec/speexdec.c m ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a1518d61c0dc91636c88ace18194b67225d0bda7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a1518d61c0dc91636c88ace18194b67225d0bda7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
