[Git][security-tracker-team/security-tracker][master] CVE-2024-22123/zabbix located patches

[Tobias Frost (@tobi)]

Tobias Frost pushed to branch master at Debian Security Tracker / security-tracker


Commits:
efe8b950 by Tobias Frost at 2024-09-16T20:52:48+02:00
CVE-2024-22123/zabbix located patches

determined by upstream ticket "ZBX-25013" matched to git commit message,
uncovers dev ticket DEV-3119 for issue and git log --grep DEV-3119
reveals git commit ids for the different versions.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8300,6 +8300,9 @@ CVE-2024-32765 (A vulnerability has been reported to affect Network & Virtual Sw
 CVE-2024-22123 (Setting SMS media allows to set GSM modem file. Later this file is use ...)
 	- zabbix 1:7.0.0+dfsg-1 (bug #1078553)
 	NOTE: https://support.zabbix.com/browse/ZBX-25013
+	NOTE: https://github.com/zabbix/zabbix/commit/499ac935f60b38992488ff895c06da8bd80d95cc (7.0.x)
+	NOTE: https://github.com/zabbix/zabbix/commit/eb64b83355dae7286821c5237f7ab83038c22367 (6.0.x)
+	NOTE: https://github.com/zabbix/zabbix/commit/dcd875c22d0f3e5106e855d9f7e9ef7c51fae9aa (5.0.x)
 CVE-2024-22122 (Zabbix allows to configure SMS notifications. AT command injection occ ...)
 	- zabbix 1:7.0.0+dfsg-1 (bug #1078553)
 	NOTE: https://support.zabbix.com/browse/ZBX-25012



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/efe8b950714d3047c0c70182a1a9b41224db0ab8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/efe8b950714d3047c0c70182a1a9b41224db0ab8
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240916/0b128173/attachment-0001.htm>