[Git][security-tracker-team/security-tracker][master] Add new guix issue

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
74e9f835 by Salvatore Bonaccorso at 2024-11-03T17:23:48+01:00
Add new guix issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,8 @@
+CVE-2024-XXXX [Guix build user takeover vulnerability]
+	- guix 1.4.0-8
+	NOTE: https://guix.gnu.org/en/blog/2024/build-user-takeover-vulnerability/
+	NOTE: Fixed by: https://git.savannah.gnu.org/cgit/guix.git/commit/?id=558224140dab669cabdaebabff18504a066c48d4
+	NOTE: Fixed by: https://git.savannah.gnu.org/cgit/guix.git/commit/?id=5ab3c4c1e43ebb637551223791db0ea3519986e1
 CVE-2024-9896 (The BBP Core \u2013 Expand bbPress powered forums with useful features ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-9868 (The Element Pack Elementor Addons (Header Footer, Template Library, Dy ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/74e9f8355d3d07af78a3d33258afdbafa1d78714

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/74e9f8355d3d07af78a3d33258afdbafa1d78714
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241103/ee622e21/attachment.htm>