[Git][security-tracker-team/security-tracker][master] Reference upstream commit for CVE-2024-22641

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
929a45dd by Salvatore Bonaccorso at 2024-10-31T11:29:07+01:00
Reference upstream commit for CVE-2024-22641

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -38340,6 +38340,7 @@ CVE-2024-22641 (TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular E
 	[bookworm] - tcpdf <no-dsa> (Minor issue)
 	[bullseye] - tcpdf <no-dsa> (Minor issue)
 	NOTE: https://github.com/tecnickcom/TCPDF/issues/724
+	NOTE: Fixed by: https://github.com/tecnickcom/TCPDF/commit/17fe9597fb31d3d08c0f02a03338928ab8bcf0b5 (6.7.7)
 CVE-2024-21512 (Versions of the package mysql2 before 3.9.8 are vulnerable to Prototyp ...)
 	NOT-FOR-US: Node mysql2
 CVE-2024-0434 (The WordPress Tour & Travel Booking Plugin for WooCommerce \u2013 WpTr ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/929a45dd1ecc45f1269386d3d50abbcf7b3b973e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/929a45dd1ecc45f1269386d3d50abbcf7b3b973e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241031/5c8f2545/attachment.htm>