[Git][security-tracker-team/security-tracker][master] Add CVE-2024-0962/libcoap3

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
69781da3 by Salvatore Bonaccorso at 2024-01-28T09:46:51+01:00
Add CVE-2024-0962/libcoap3

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11,7 +11,13 @@ CVE-2024-23739 (An issue in Discord for macOS version 0.0.291 and before, allows
 CVE-2024-23738 (An issue in Postman version 10.22 and before on macOS allows a remote  ...)
 	NOT-FOR-US: Postman on MacOS
 CVE-2024-0962 (A vulnerability was found in obgm libcoap 4.3.4. It has been rated as  ...)
-	TODO: check
+	- libcoap3 <unfixed>
+	- libcoap2 <not-affected> (Vulnerable code not present)
+	- libcoap <not-affected> (Vulnerable code not present)
+	NOTE: https://github.com/obgm/libcoap/issues/1310
+	NOTE: https://github.com/obgm/libcoap/issues/1310#issue-2099860835
+	NOTE: https://github.com/obgm/libcoap/pull/1311
+	NOTE: Fixed by: https://github.com/obgm/libcoap/commit/2b28d8b0e9607e71a145345b4fe49517e052b7d9
 CVE-2024-0960 (A vulnerability was found in flink-extended ai-flow 0.3.1. It has been ...)
 	NOT-FOR-US: flink-extended ai-flow
 CVE-2024-0959 (A vulnerability was found in StanfordVL GibsonEnv 0.3.1. It has been c ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/69781da32dd9acde8f4cd49c5a85551a70af6fb7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/69781da32dd9acde8f4cd49c5a85551a70af6fb7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240128/a9a8618f/attachment-0001.htm>