[Git][security-tracker-team/security-tracker][master] new spring issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
289175eb by Moritz Muehlenhoff at 2024-12-05T11:13:36+01:00
new spring issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -17,7 +17,9 @@ CVE-2024-42195 (HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection.
 CVE-2024-39219 (An issue in Aginode GigaSwitch V5 before version 7.06G allows authenti ...)
 	TODO: check
 CVE-2024-38829 (A vulnerability in VMware Tanzu Spring LDAP allows data exposure for c ...)
-	TODO: check
+	- libspring-java <unfixed> (unimportant)
+	NOTE: https://spring.io/security/cve-2024-38829
+	NOTE: Only supported for building applications shipped in Debian, see README.Debian.security
 CVE-2024-12188 (A vulnerability was found in 1000 Projects Library Management System 1 ...)
 	TODO: check
 CVE-2024-12187 (A vulnerability was found in 1000 Projects Library Management System 1 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/289175eba7044a2d5b77695f8a15193694e4ab9b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/289175eba7044a2d5b77695f8a15193694e4ab9b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241205/78aa71fb/attachment.htm>