[Git][security-tracker-team/security-tracker][master] new iotjs issue

Moritz Muehlenhoff (@jmm) jmm at debian.org
Tue Apr 2 12:21:55 BST 2024



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
71f0539b by Moritz Muehlenhoff at 2024-04-02T13:21:27+02:00
new iotjs issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -911,7 +911,11 @@ CVE-2024-29667 (SQL Injection vulnerability in Tongtianxing Technology Co., Ltd
 CVE-2024-29640 (An issue in aliyundrive-webdav v.2.3.3 and before allows a remote atta ...)
 	NOT-FOR-US: aliyundrive-webdav
 CVE-2024-29489 (Jerryscript 2.4.0 has SEGV at ./jerry-core/ecma/base/ecma-helpers.c:23 ...)
-	TODO: check
+	- iotjs <removed>
+	[bullseye] - iotjs <ignored> (Minor issue)
+	NOTE: https://github.com/jerryscript-project/jerryscript/issues/5101
+	NOTE: https://github.com/jerryscript-project/jerryscript/pull/5129
+	NOTE: https://github.com/jerryscript-project/jerryscript/commit/cefd391772529c8a9531d7b3c244d78d38be47c6
 CVE-2024-29316 (NodeBB 3.6.7 is vulnerable to Incorrect Access Control, e.g., a low-pr ...)
 	NOT-FOR-US: NodeBB
 CVE-2024-29202 (JumpServer is an open source bastion host and an operation and mainten ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/71f0539b9e77e392a3de6b57441e83ecb0107a7b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/71f0539b9e77e392a3de6b57441e83ecb0107a7b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240402/933254bf/attachment.htm>


More information about the debian-security-tracker-commits mailing list