[Git][security-tracker-team/security-tracker][master] Add CVE-2024-46461/vlc

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a3d829f6 by Salvatore Bonaccorso at 2024-09-25T22:28:53+02:00
Add CVE-2024-46461/vlc

- - - - -


2 changed files:

- data/CVE/list
- data/DSA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -51,7 +51,8 @@ CVE-2024-46488 (sqlite-vec v0.1.1 was discovered to contain a heap buffer overfl
 CVE-2024-46485 (dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forge ...)
 	TODO: check
 CVE-2024-46461 (VLC media player 3.0.20 and earlier is vulnerable to denial of service ...)
-	TODO: check
+	- vlc 3.0.21-1
+	NOTE: https://www.videolan.org/security/sb-vlc3021.html
 CVE-2024-45750 (An issue in TheGreenBow Windows Standard VPN Client 6.87.108 (and olde ...)
 	TODO: check
 CVE-2024-45613 (CKEditor 5 is a JavaScript rich-text editor. Starting in version 40.0. ...)


=====================================
data/DSA/list
=====================================
@@ -227,6 +227,7 @@
 	{CVE-2024-34055}
 	[bookworm] - cyrus-imapd 3.6.1-4+deb12u2
 [11 Jun 2024] DSA-5707-1 vlc - security update
+	{CVE-2024-46461}
 	[bullseye] - vlc 3.0.21-0+deb11u1
 	[bookworm] - vlc 3.0.21-0+deb12u1
 [05 Jun 2024] DSA-5706-1 libarchive - security update



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a3d829f6604a21b8d1be4527d1d6393ca283ff7d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a3d829f6604a21b8d1be4527d1d6393ca283ff7d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240925/73ca2f54/attachment-0001.htm>