[Git][security-tracker-team/security-tracker][master] Add CVE-2023-52890/ntfs-3g

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Jun 14 20:20:47 BST 2024



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9771df4a by Salvatore Bonaccorso at 2024-06-14T21:19:27+02:00
Add CVE-2023-52890/ntfs-3g

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -847,7 +847,11 @@ CVE-2024-1736 (An issue has been discovered in GitLab CE/EE affecting all versio
 CVE-2024-1495 (An issue has been discovered in GitLab CE/EE affecting all versions st ...)
 	- gitlab <unfixed>
 CVE-2023-52890 (NTFS-3G before 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in l ...)
-	TODO: check
+	- ntfs-3g <unfixed>
+	[bookworm] - ntfs-3g <no-dsa> (Minor issue)
+	[bullseye] - ntfs-3g <no-dsa> (Minor issue)
+	NOTE: https://github.com/tuxera/ntfs-3g/issues/84
+	NOTE: Fixed by: https://github.com/tuxera/ntfs-3g/commit/75dcdc2cf37478fad6c0e3427403d198b554951d
 CVE-2024-5909 (A problem with a protection mechanism in the Palo Alto Networks Cortex ...)
 	NOT-FOR-US: Palo Alto Networks
 CVE-2024-5908 (A problem with the Palo Alto Networks GlobalProtect app can result in  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9771df4ad0d8398ca0679e2afa674ca8bb483caf

-- 
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9771df4ad0d8398ca0679e2afa674ca8bb483caf
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240614/23aaa752/attachment.htm>


More information about the debian-security-tracker-commits mailing list