[Git][security-tracker-team/security-tracker][master] new iptraf-ng issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
85a88a69 by Moritz Muehlenhoff at 2024-12-17T10:10:12+01:00
new iptraf-ng issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -25,7 +25,9 @@ CVE-2024-55085 (GetSimple CMS CE 3.3.19 suffers from arbitrary code execution in
 CVE-2024-54125 (Improper authorization in handler for custom URL scheme issue in "Shon ...)
 	NOT-FOR-US: Shonen Jump+
 CVE-2024-52949 (iptraf-ng 1.2.1 has a stack-based buffer overflow.)
-	TODO: check
+	- iptraf-ng <unfixed> (unimportant)
+	NOTE: https://github.com/iptraf-ng/iptraf-ng/commit/2b623e991115358a57275af8a53feb5ae707b3ae (v1.2.2)
+	NOTE: Negligible security impact
 CVE-2024-38499 (CA Client Automation (ITCM) allows non-admin/non-root users to encrypt ...)
 	NOT-FOR-US: Broadcom CA Client Automation
 CVE-2024-37776 (A cross-site scripting (XSS) vulnerability in Sunbird DCIM dcTrack v9. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/85a88a6906bcdad537644cde829ed0961d86b87c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/85a88a6906bcdad537644cde829ed0961d86b87c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241217/fa8cafbf/attachment.htm>