Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 44e282df by Salvatore Bonaccorso at 2024-01-05T08:03:48+01:00 Add CVE-2024-22051 Note that the issue is in theory already covered by CVE-2022-24724 but apparently it got a specific CVE assignment for ruby-commonmarker itself. Duplicate the version information. Asked back as well on the Red Hat bugzilla about the CVE distinction. Link: https://bugzilla.redhat.com/show_bug.cgi?id=2256887#c4 - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,12 @@ +CVE-2024-22051 [integer overflow in cmark-gfm's table row parsing may lead to heap memory corruption] + - ruby-commonmarker 0.23.4-1 + [bullseye] - ruby-commonmarker <no-dsa> (Minor issue) + [buster] - ruby-commonmarker <no-dsa> (Minor issue) + NOTE: https://github.com/github/cmark-gfm/security/advisories/GHSA-mc3g-88wq-6f4x + NOTE: https://github.com/gjtorikian/commonmarker/security/advisories/GHSA-fmx4-26r3-wxpf + NOTE: https://github.com/gjtorikian/commonmarker/commit/ab4504fd17460627a6ab255bc3c63e8e5fc6aed3 (v0.23.4) + NOTE: This is a specific CVE assignment for the issue covered in CVE-2022-24724 + NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2256887 CVE-2024-22047 NOT-FOR-US: audited ruby gem CVE-2024-21625 (SideQuest is a place to get virtual reality applications for Oculus Qu ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/44e282df06856b948744c903e1e39106847ab99e -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/44e282df06856b948744c903e1e39106847ab99e You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
