[Git][security-tracker-team/security-tracker][master] new iotjs issue
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Tue Apr 2 12:21:55 BST 2024
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
71f0539b by Moritz Muehlenhoff at 2024-04-02T13:21:27+02:00
new iotjs issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -911,7 +911,11 @@ CVE-2024-29667 (SQL Injection vulnerability in Tongtianxing Technology Co., Ltd
CVE-2024-29640 (An issue in aliyundrive-webdav v.2.3.3 and before allows a remote atta ...)
NOT-FOR-US: aliyundrive-webdav
CVE-2024-29489 (Jerryscript 2.4.0 has SEGV at ./jerry-core/ecma/base/ecma-helpers.c:23 ...)
- TODO: check
+ - iotjs <removed>
+ [bullseye] - iotjs <ignored> (Minor issue)
+ NOTE: https://github.com/jerryscript-project/jerryscript/issues/5101
+ NOTE: https://github.com/jerryscript-project/jerryscript/pull/5129
+ NOTE: https://github.com/jerryscript-project/jerryscript/commit/cefd391772529c8a9531d7b3c244d78d38be47c6
CVE-2024-29316 (NodeBB 3.6.7 is vulnerable to Incorrect Access Control, e.g., a low-pr ...)
NOT-FOR-US: NodeBB
CVE-2024-29202 (JumpServer is an open source bastion host and an operation and mainten ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/71f0539b9e77e392a3de6b57441e83ecb0107a7b
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/71f0539b9e77e392a3de6b57441e83ecb0107a7b
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240402/933254bf/attachment.htm>
More information about the debian-security-tracker-commits
mailing list