[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2024-35226/msarty3 via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sun Nov 17 13:46:34 GMT 2024
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
1363667f by Salvatore Bonaccorso at 2024-11-17T14:45:51+01:00
Track fixed version for CVE-2024-35226/msarty3 via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -43789,7 +43789,7 @@ CVE-2024-35240 (Umbraco Commerce is an open source dotnet ecommerce solution. In
CVE-2024-35239 (Umbraco Commerce is an open source dotnet web forms solution. In affec ...)
NOT-FOR-US: Umbraco Commerce
CVE-2024-35226 (Smarty is a template engine for PHP, facilitating the separation of pr ...)
- - smarty3 <unfixed> (bug #1072530)
+ - smarty3 3.1.48-2 (bug #1072530)
- smarty4 4.5.4-1 (bug #1072529)
NOTE: https://github.com/smarty-php/smarty/security/advisories/GHSA-4rmg-292m-wg3w
NOTE: https://github.com/smarty-php/smarty/commit/76881c8d33d80648f70c9b0339f770f5f69a87a2 (v4.5.3)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1363667f0745fcad1cf856fc98769bae01b38c30
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1363667f0745fcad1cf856fc98769bae01b38c30
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241117/d217e4f4/attachment.htm>
More information about the debian-security-tracker-commits
mailing list