[Git][security-tracker-team/security-tracker][master] Add reference for CVE-2024-53427/jq
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Apr 11 21:15:03 BST 2025
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
fa8cf55e by Salvatore Bonaccorso at 2025-04-11T22:14:27+02:00
Add reference for CVE-2024-53427/jq
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -15181,7 +15181,9 @@ CVE-2024-53427 (decNumberCopy in decNumber.c in jq through 1.7.1 does not proper
- jq <unfixed>
[bookworm] - jq <no-dsa> (Minor issue)
[bullseye] - jq <postponed> (Minor issue, wait until it's fixed upstream)
+ NOTE: https://github.com/jqlang/jq/security/advisories/GHSA-x6c3-qv5r-7q22
NOTE: https://github.com/jqlang/jq/issues/3196
+ NOTE: https://github.com/jqlang/jq/commit/b86ff49f46a4a37e5a8e75a140cb5fd6e1331384
NOTE: https://github.com/jqlang/jq/commit/a09a4dfd55e6c24d04b35062ccfe4509748b1dd3
CVE-2024-52925 (In OPSWAT MetaDefender Kiosk before 4.7.0, arbitrary code execution ca ...)
NOT-FOR-US: OPSWAT MetaDefender Kiosk
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fa8cf55e540f5893e3725b704a1be82511d2ed5f
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fa8cf55e540f5893e3725b704a1be82511d2ed5f
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250411/084bbe04/attachment.htm>
More information about the debian-security-tracker-commits
mailing list