[Git][security-tracker-team/security-tracker][master] Add upstream tag information for CVE-2024-37407
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sun Jun 9 08:05:44 BST 2024
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
8012f14f by Salvatore Bonaccorso at 2024-06-09T09:04:58+02:00
Add upstream tag information for CVE-2024-37407
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -13,7 +13,7 @@ CVE-2024-37408 (fprintd through 1.94.3 lacks a security attention mechanism, and
CVE-2024-37407 (Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP ar ...)
- libarchive <unfixed>
NOTE: https://github.com/libarchive/libarchive/pull/2145
- NOTE: https://github.com/libarchive/libarchive/commit/b6a979481b7d77c12fa17bbed94576b63bbcb0c0
+ NOTE: https://github.com/libarchive/libarchive/commit/b6a979481b7d77c12fa17bbed94576b63bbcb0c0 (v3.7.4)
CVE-2024-35756 (Improper Neutralization of Input During Web Page Generation (XSS or 'C ...)
NOT-FOR-US: WordPress plugin
CVE-2024-35755 (Improper Neutralization of Input During Web Page Generation (XSS or 'C ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8012f14f460f084232d19380e0810aad83031c11
--
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8012f14f460f084232d19380e0810aad83031c11
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240609/06c9a092/attachment.htm>
More information about the debian-security-tracker-commits
mailing list