[Git][security-tracker-team/security-tracker][master] Add pull request reference for CVE-2024-39780

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
052695a5 by Salvatore Bonaccorso at 2025-04-02T20:50:33+02:00
Add pull request reference for CVE-2024-39780

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -187,6 +187,8 @@ CVE-2024-42325 (Zabbix API user.get returns all users that share common group wi
 	TODO: check
 CVE-2024-39780 (A YAML deserialization vulnerability was found in the Robot Operating  ...)
 	- ros-dynamic-reconfigure <unfixed>
+	NOTE: https://github.com/ros/dynamic_reconfigure/pull/202
+	NOTE: Fixed by: https://github.com/ros/dynamic_reconfigure/commit/9975cc8b55b3039115da6662cc7279cc65303844
 CVE-2024-36469 (Execution time for an unsuccessful login differs when using a non-exis ...)
 	TODO: check
 CVE-2024-36465 (A low privilege (regular) Zabbix user with API access can use SQL inje ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/052695a599e37360c7ce2dbdd440702c7fc39dc6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/052695a599e37360c7ce2dbdd440702c7fc39dc6
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250402/190f17a7/attachment.htm>