[Git][security-tracker-team/security-tracker][master] Clarify what is needed fo tif CVE-2024-23525

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sun Jan 21 20:09:34 GMT 2024



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
439b0171 by Salvatore Bonaccorso at 2024-01-21T21:08:57+01:00
Clarify what is needed fo tif CVE-2024-23525

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -391,7 +391,7 @@ CVE-2024-23525 (The Spreadsheet::ParseXLSX package before 0.30 for Perl allows X
 	- libspreadsheet-parsexlsx-perl 0.31-1 (bug #1061098)
 	NOTE: https://gist.github.com/phvietan/d1c95a88ab6e17047b0248d6bf9eac4a
 	NOTE: https://github.com/MichaelDaum/spreadsheet-parsexlsx/issues/10
-	NOTE: https://github.com/MichaelDaum/spreadsheet-parsexlsx/commit/1d55f90caf433c7442e5be21a1849af2b5522ffe (0.30)
+	NOTE: Isolated changes: https://github.com/MichaelDaum/spreadsheet-parsexlsx/commit/1d55f90caf433c7442e5be21a1849af2b5522ffe#diff-0702489aae2d242fa44a345ab28b021c884c51a87ba376b835f44e3474dc2385L1175-L1180 (0.30)
 CVE-2024-22416 (pyLoad is a free and open-source Download Manager written in pure Pyth ...)
 	- pyload <itp> (bug #1001980)
 CVE-2024-22414 (flaskBlog is a simple blog app built with Flask. Improper storage and  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/439b01716d9e39363b6886a8ac9b498e44a7be30

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/439b01716d9e39363b6886a8ac9b498e44a7be30
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240121/ef933716/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list