[Git][security-tracker-team/security-tracker][master] LTS triaging - sogo, xfpt

[Santiago R.R. (@santiago)]

Santiago R.R. pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a98db46d by Santiago Ruano Rincón at 2024-08-31T17:30:53-03:00
LTS triaging - sogo, xfpt

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -484,6 +484,7 @@ CVE-2024-45046 (PHPSpreadsheet is a pure PHP library for reading and writing spr
 CVE-2024-43700 (xfpt versions prior to 1.01 fails to handle appropriately some paramet ...)
 	- xfpt <unfixed> (bug #1080219)
 	[bookworm] - xfpt <no-dsa> (Minor issue)
+	[bullseye] - xfpt <postponed> (Minor issue)
 	NOTE: https://github.com/PhilipHazel/xfpt/commit/a690304bbd3fd19e9dfdad50dcc87ad829f744e4
 CVE-2024-41918 ('Rakuten Ichiba App' for Android 12.4.0 and earlier and 'Rakuten Ichib ...)
 	NOT-FOR-US: Rakuten Ichiba App
@@ -33286,6 +33287,7 @@ CVE-2024-34467 (ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to ina
 CVE-2024-34462 (Alinto SOGo through 5.10.0 allows XSS during attachment preview.)
 	- sogo 5.11.0-1 (bug #1071163)
 	[bookworm] - sogo <no-dsa> (Minor issue)
+	[bullseye] - sogo <postponed> (Minor issue)
 	[buster] - sogo <postponed> (Minor issue)
 	NOTE: https://github.com/Alinto/sogo/commit/2e37e59ed140d4aee0ff2fba579ca5f83f2c5920 (SOGo-5.11.0)
 CVE-2023-52729 (TCPServer.cpp in SimpleNetwork through 29bc615 has an off-by-one error ...)
@@ -64524,6 +64526,7 @@ CVE-2023-49106 (Missing Password Field Masking vulnerability in Hitachi Device M
 CVE-2023-48104 (Alinto SOGo before 5.9.1 is vulnerable to HTML Injection.)
 	- sogo 5.9.1-1 (bug #1060925)
 	[bookworm] - sogo <no-dsa> (Minor issue)
+	[bullseye] - sogo <postponed> (Minor issue)
 	[buster] - sogo <ignored> (Minor issue)
 	NOTE: Fixed by: https://github.com/Alinto/sogo/commit/7481ccf37087c3f456d7e5a844da01d0f8883098 (SOGo-5.9.1)
 CVE-2023-47460 (SQL injection vulnerability in Knovos Discovery v.22.67.0 allows a rem ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a98db46dea8f91a5836375b57076acb3e8c68c82

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a98db46dea8f91a5836375b57076acb3e8c68c82
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240831/71934dbe/attachment.htm>