[Git][security-tracker-team/security-tracker][master] Add CVE-2024-23525/libspreadsheet-parsexlsx-perl

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
224d7c97 by Salvatore Bonaccorso at 2024-01-18T09:19:52+01:00
Add CVE-2024-23525/libspreadsheet-parsexlsx-perl

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,8 @@
 CVE-2024-23525 (The Spreadsheet::ParseXLSX package before 0.30 for Perl allows XXE att ...)
-	TODO: check
+	- libspreadsheet-parsexlsx-perl <unfixed>
+	NOTE: https://gist.github.com/phvietan/d1c95a88ab6e17047b0248d6bf9eac4a
+	NOTE: https://github.com/MichaelDaum/spreadsheet-parsexlsx/issues/10
+	NOTE: https://github.com/MichaelDaum/spreadsheet-parsexlsx/commit/1d55f90caf433c7442e5be21a1849af2b5522ffe (0.30)
 CVE-2024-22416 (pyLoad is a free and open-source Download Manager written in pure Pyth ...)
 	TODO: check
 CVE-2024-22414 (flaskBlog is a simple blog app built with Flask. Improper storage and  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/224d7c979f1ed284b7e3f51836bf85871ea990d2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/224d7c979f1ed284b7e3f51836bf85871ea990d2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240118/ba643a2d/attachment.htm>