[Git][security-tracker-team/security-tracker][master] Add CVE-2024-27099/azure-uamqp-python

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0164749c by Salvatore Bonaccorso at 2024-02-28T09:38:48+01:00
Add CVE-2024-27099/azure-uamqp-python

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -206,7 +206,9 @@ CVE-2024-27508 (Atheme 7.2.12 contains a memory leak vulnerability in /atheme/sr
 CVE-2024-27507 (libLAS 1.8.1 contains a memory leak vulnerability in /libLAS/apps/ts2l ...)
 	- liblas <removed>
 CVE-2024-27099 (The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Ser ...)
-	TODO: check
+	- azure-uamqp-python <unfixed>
+	NOTE: https://github.com/Azure/azure-uamqp-c/security/advisories/GHSA-6rh4-fj44-v4jj
+	NOTE: https://github.com/Azure/azure-uamqp-c/commit/2ca42b6e4e098af2d17e487814a91d05f6ae4987
 CVE-2024-26473 (A reflected cross-site scripting (XSS) vulnerability in SocialMediaWeb ...)
 	NOT-FOR-US: SocialMediaWebsite
 CVE-2024-26472 (A reflected cross-site scripting (XSS) vulnerability in SocialMediaWeb ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0164749cbe91d2e6de20468fc4dca6363794f11e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0164749cbe91d2e6de20468fc4dca6363794f11e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240228/8ccd969a/attachment.htm>