[Git][security-tracker-team/security-tracker][master] mark CVE-2024-5480/pytorch as non-issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
05830c90 by Moritz Muehlenhoff at 2024-10-01T11:04:08+02:00
mark CVE-2024-5480/pytorch as non-issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -27630,9 +27630,9 @@ CVE-2024-5489 (The Wbcom Designs \u2013 Custom Font Uploader plugin for WordPres
 CVE-2024-5482 (A Server-Side Request Forgery (SSRF) vulnerability exists in the 'add_ ...)
 	NOT-FOR-US: parisneo/lollms-webui
 CVE-2024-5480 (A vulnerability in the PyTorch's torch.distributed.rpc framework, spec ...)
-	- pytorch <unfixed> (bug #1072969)
-	[bookworm] - pytorch <no-dsa> (Minor issue)
-	[bullseye] - pytorch <no-dsa> (Minor issue)
+	NOTE: Non issue as only documented to be used for internal communication:
+	NOTE: https://github.com/pytorch/pytorch/security/policy#using-distributed-features
+	NOTE: https://github.com/pytorch/pytorch/security/policy#using-distributed-features
 	NOTE: https://huntr.com/bounties/39811836-c5b3-4999-831e-46fee8fcade3
 CVE-2024-5478 (A Cross-site Scripting (XSS) vulnerability exists in the SAML metadata ...)
 	NOT-FOR-US: lunary-ai/lunary



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/05830c90bfb4f0d3e1f9a8b6a395201e09fcc61e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/05830c90bfb4f0d3e1f9a8b6a395201e09fcc61e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241001/2a541b54/attachment.htm>