[Git][security-tracker-team/security-tracker][master] Add CVE-2024-35190/asterisk

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cfe08d7f by Salvatore Bonaccorso at 2024-05-20T17:46:39+02:00
Add CVE-2024-35190/asterisk

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1349,7 +1349,11 @@ CVE-2024-35784 (In the Linux kernel, the following vulnerability has been resolv
 	- linux 6.7.12-1
 	NOTE: https://git.kernel.org/linus/b0ad381fa7690244802aed119b478b4bdafc31dd (6.8-rc6)
 CVE-2024-35190 (Asterisk is an open source private branch exchange and telephony toolk ...)
-	TODO: check
+	- asterisk <unfixed>
+	NOTE: https://github.com/asterisk/asterisk/security/advisories/GHSA-qqxj-v78h-hrf9
+	NOTE: https://github.com/asterisk/asterisk/pull/600
+	NOTE: https://github.com/asterisk/asterisk/pull/602
+	NOTE: https://github.com/asterisk/asterisk/commit/85241bd22936cc15760fd1f65d16c98be7aeaf6d
 CVE-2024-35174 (Missing Authorization vulnerability in Flothemes Flo Forms.This issue  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-35173 (Missing Authorization vulnerability in PluginEver Serial Numbers for W ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cfe08d7f6089a0e7801fe5ae818a4f60f6c4f261

-- 
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cfe08d7f6089a0e7801fe5ae818a4f60f6c4f261
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240520/c518d14b/attachment-0001.htm>