[Git][security-tracker-team/security-tracker][master] Add new micropython issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a7560e72 by Salvatore Bonaccorso at 2024-09-17T22:30:05+02:00
Add new micropython issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5,11 +5,19 @@ CVE-2024-8951 (A vulnerability classified as problematic was found in SourceCode
 CVE-2024-8949 (A vulnerability classified as critical has been found in SourceCodeste ...)
 	NOT-FOR-US: SourceCodester Online Eyewear Shop
 CVE-2024-8948 (A vulnerability was found in MicroPython 1.23.0. It has been rated as  ...)
-	TODO: check
+	- micropython <unfixed>
+	NOTE: https://github.com/micropython/micropython/issues/13041
+	NOTE: https://github.com/micropython/micropython/commit/908ab1ceca15ee6fd0ef82ca4cba770a3ec41894
 CVE-2024-8947 (A vulnerability was found in MicroPython 1.22.2. It has been declared  ...)
-	TODO: check
+	- micropython <unfixed>
+	NOTE: https://github.com/micropython/micropython/issues/13283
+	NOTE: https://github.com/micropython/micropython/issues/13283#issuecomment-1918479709
+	NOTE: Fixed by: https://github.com/micropython/micropython/commit/4bed614e707c0644c06e117f848fa12605c711cd (v1.23.0)
 CVE-2024-8946 (A vulnerability was found in MicroPython 1.23.0. It has been classifie ...)
-	TODO: check
+	- micropython <unfixed>
+	NOTE: https://github.com/micropython/micropython/issues/13006
+	NOTE: https://github.com/micropython/micropython/issues/13006#issuecomment-1820309455
+	NOTE: Fixed by: https://github.com/micropython/micropython/commit/29943546343c92334e8518695a11fc0e2ceea68b
 CVE-2024-8945 (A vulnerability has been found in CodeCanyon RISE Ultimate Project Man ...)
 	NOT-FOR-US: CodeCanyon RISE Ultimate Project Manager
 CVE-2024-8944 (A vulnerability, which was classified as critical, was found in code-p ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a7560e723b43c944016f22e48c43786166862f65

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a7560e723b43c944016f22e48c43786166862f65
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240917/94bb504a/attachment-0001.htm>