Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d94fe81e by Salvatore Bonaccorso at 2026-09-09T20:51:25+02:00
Revert "CVE-2024-58379: Add commit link"
This reverts commit 7c8f124ba4485b153a1a00b4b971b92efb3e67b0.
- - - - -
bd95550c by Salvatore Bonaccorso at 2026-09-09T20:52:44+02:00
Reference upstream commit for CVE-2024-58379
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -10718,7 +10718,7 @@ CVE-2024-58379 (nodemailer before 6.9.9 contains a
regular expression denial of
- node-nodemailer 6.9.13+~6.4.14-1
[bookworm] - node-nodemailer <postponed> (Minor issue)
NOTE:
https://github.com/nodemailer/nodemailer/security/advisories/GHSA-9h6g-pr28-7cqp
- NOTE:
https://github.com/nodemailer/nodemailer/commit/90b3e24d23929ebf9f4e16261049b40ee4055a39
+ NOTE: Fixed by:
https://github.com/nodemailer/nodemailer/commit/dd8f5e8a4ddc99992e31df76bcff9c590035cd4a
(v6.9.9)
CVE-2023-31308 (A malicious virtual function can invoke the certain command
handlers i ...)
NOT-FOR-US: AMD
CVE-2026-XXXX [GHSA-fmgr-6ggq-9859: PCRE2: integer overflow in
pcre2_compile_32() causes out-of-bounds write on 32-bit systems]
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/c822ad004b41c4f7622416261ef271ded2e01191...bd95550ca9171dcb65b65b3a72f04bbd835d59b4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/c822ad004b41c4f7622416261ef271ded2e01191...bd95550ca9171dcb65b65b3a72f04bbd835d59b4
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits