[Git][security-tracker-team/security-tracker][master] CVE-2024-58250/ppp

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a829e894 by Bastien Roucariès at 2025-04-22T18:53:26+02:00
CVE-2024-58250/ppp

The fix break configuration

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -49,6 +49,7 @@ CVE-2024-13569 (The Front End Users WordPress plugin through 3.2.32 does not san
 CVE-2024-58250 (The passprompt plugin in pppd in ppp before 2.5.2 mishandles privilege ...)
 	- ppp 2.5.2-1+1
 	NOTE: Fixed by: https://github.com/ppp-project/ppp/commit/0a66ad22e54c72690ec2a29a019767c55c5281fc (v2.5.2)
+	NOTE: Fix remove the passprompt plugin replaced by passwordfd (may break configuration)
 CVE-2025-3839 [Require user interaction before opening URL in external application]
 	- epiphany-browser 48.1-1
 	NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/issues/2641



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a829e894c78e6b85f27a77a9a551b606d7972922

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a829e894c78e6b85f27a77a9a551b606d7972922
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250422/55570458/attachment.htm>