[Git][security-tracker-team/security-tracker][master] Add initial tracking for CVE-2024-11079/ansible(-core)

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9fc7c58a by Salvatore Bonaccorso at 2024-11-12T08:13:33+01:00
Add initial tracking for CVE-2024-11079/ansible(-core)

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -10,6 +10,11 @@ CVE-2024-49393 [To and Cc email header fields are not protected by cryptographic
 	- mutt <unfixed>
 	- neomutt <unfixed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2325317
+CVE-2024-11079 [Unsafe Tagging Bypass via hostvars Object in Ansible-Core]
+	- ansible-core <unfixed>
+	- ansible 5.4.0-1
+	NOTE: ansible-core was split off from src:ansible with 4.6.0-1 in experimental/5.4.0-1 in sid
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2325171
 CVE-2024-50263 [fork: only invoke khugepaged, ksm hooks if no error]
 	- linux 6.11.7-1
 	[bookworm] - linux <not-affected> (Vulnerable code not present)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9fc7c58a410dbb3842f588974b3c3c62a3a59497

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9fc7c58a410dbb3842f588974b3c3c62a3a59497
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241112/d5c6d6f3/attachment.htm>