[Git][security-tracker-team/security-tracker][master] Process three new krb5 issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fb431cc7 by Salvatore Bonaccorso at 2024-02-26T21:30:06+01:00
Process three new krb5 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -21,11 +21,17 @@ CVE-2024-26466 (A DOM based cross-site scripting (XSS) vulnerability in the comp
 CVE-2024-26465 (A DOM based cross-site scripting (XSS) vulnerability in the component  ...)
 	TODO: check
 CVE-2024-26462 (Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in / ...)
-	TODO: check
+	- krb5 <unfixed>
+	NOTE: https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_3.md
+	TODO: check, unclear upstream report status
 CVE-2024-26461 (Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in / ...)
-	TODO: check
+	- krb5 <unfixed>
+	NOTE: https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md
+	TODO: check, unclear upstream report status
 CVE-2024-26458 (Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/r ...)
-	TODO: check
+	- krb5 <unfixed>
+	NOTE: https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_1.md
+	NOTE: check, unclear upstream report status
 CVE-2024-26455 (fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bi ...)
 	TODO: check
 CVE-2024-25925 (Unrestricted Upload of File with Dangerous Type vulnerability in SYSBA ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fb431cc79f8f7215b77a58aaeecc9afce9401b84

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fb431cc79f8f7215b77a58aaeecc9afce9401b84
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240226/53c70223/attachment.htm>