[Git][security-tracker-team/security-tracker][master] Update information for CVE-2024-24806/libuv1
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Feb 10 16:45:08 GMT 2024
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
12cec0f3 by Salvatore Bonaccorso at 2024-02-10T17:43:42+01:00
Update information for CVE-2024-24806/libuv1
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -373,9 +373,10 @@ CVE-2024-25144 (The IFrame widget in Liferay Portal 7.2.0 through 7.4.3.26, and
CVE-2024-24806 (libuv is a multi-platform support library with a focus on asynchronous ...)
- libuv1 <unfixed> (bug #1063484)
NOTE: https://github.com/libuv/libuv/security/advisories/GHSA-f74f-cvh7-c6q6
- NOTE: https://github.com/libuv/libuv/commit/0f2d7e784a256b54b2385043438848047bc2a629 (v1.48.0)
- NOTE: https://github.com/libuv/libuv/commit/3530bcc30350d4a6ccf35d2f7b33e23292b9de70 (v1.48.0)
- NOTE: https://github.com/libuv/libuv/commit/e0327e1d508b8207c9150b6e582f0adf26213c39 (v1.48.0)
+ NOTE: Introduced by: https://github.com/libuv/libuv/commit/6dd44caa35b4697d7e8c1b9fa0ba8e95d73355de (v1.24.0)
+ NOTE: Fixed by: https://github.com/libuv/libuv/commit/0f2d7e784a256b54b2385043438848047bc2a629 (v1.48.0)
+ NOTE: Fixed by: https://github.com/libuv/libuv/commit/3530bcc30350d4a6ccf35d2f7b33e23292b9de70 (v1.48.0)
+ NOTE: Fixed by: https://github.com/libuv/libuv/commit/e0327e1d508b8207c9150b6e582f0adf26213c39 (v1.48.0)
CVE-2024-24350 (File Upload vulnerability in Software Publico e-Sic Livre v.2.0 and be ...)
NOT-FOR-US: Software Publico e-Sic Livre
CVE-2024-24216 (Zentao v18.0 to v18.10 was discovered to contain a remote code executi ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/12cec0f3bfc3e0946803e0c3831166be3a4920f9
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/12cec0f3bfc3e0946803e0c3831166be3a4920f9
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240210/0a9ed2de/attachment.htm>
More information about the debian-security-tracker-commits
mailing list