[Git][security-tracker-team/security-tracker][master] Add CVE-2023-41000/gpac

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
10204dd9 by Salvatore Bonaccorso at 2023-09-11T23:11:52+02:00
Add CVE-2023-41000/gpac

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -28,7 +28,9 @@ CVE-2023-41256 (Dover Fueling Solutions MAGLINK LX Web Console Configuration ver
 CVE-2023-41103 (Interact 7.9.79.5 allows stored Cross-site Scripting (XSS) attacks in  ...)
 	NOT-FOR-US: Interact
 CVE-2023-41000 (GPAC through 2.2.1 has a use-after-free vulnerability in the function  ...)
-	TODO: check
+	- gpac <unfixed>
+	NOTE: https://github.com/gpac/gpac/issues/2550
+	NOTE: Fixed by: https://github.com/gpac/gpac/commit/0018b5e4e07a1465287e7dff69b387929f5a75fa
 CVE-2023-40946 (Schoolmate 1.3 is vulnerable to SQL Injection in the variable $usernam ...)
 	NOT-FOR-US: Schoolmate
 CVE-2023-40945 (Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Inje ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/10204dd93568ab7620c4938bbd13f4a09da45e3b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/10204dd93568ab7620c4938bbd13f4a09da45e3b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230911/8c4a2cda/attachment.htm>