[Git][security-tracker-team/security-tracker][master] CVE-2024-58250/ppp: Ignore, as agreed with the security team

[Adrian Bunk (@bunk)]

Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ab5781fd by Adrian Bunk at 2025-04-27T17:27:06+03:00
CVE-2024-58250/ppp: Ignore, as agreed with the security team

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -1101,7 +1101,8 @@ CVE-2024-13569 (The Front End Users WordPress plugin through 3.2.32 does not san
 	NOT-FOR-US: WordPress plugin
 CVE-2024-58250 (The passprompt plugin in pppd in ppp before 2.5.2 mishandles privilege ...)
 	- ppp 2.5.2-1+1
-	[bookworm] - ppp <no-dsa> (Minor issue)
+	[bookworm] - ppp <ignored> (plugin removal may break existing configurations)
+	[bullseye] - ppp <ignored> (plugin removal may break existing configurations)
 	NOTE: Fixed by: https://github.com/ppp-project/ppp/commit/0a66ad22e54c72690ec2a29a019767c55c5281fc (v2.5.2)
 	NOTE: Fix removes the passprompt plugin (can be replaced using passwordfd plugin, may break existing
 	NOTE: configurations)


=====================================
data/dla-needed.txt
=====================================
@@ -286,10 +286,6 @@ poppler (Adrian Bunk)
   NOTE: 20250412: Fix postponed CVEs (Beuc/front-desk)
   NOTE: 20250413: bookworm update submitted, bullseye will be published after that (bunk)
 --
-ppp (Adrian Bunk)
-  NOTE: 20250422: Added by Front-Desk (rouca)
-  NOTE: 20250422: Will need a NEWS.Debian file, may break config (rouca)
---
 python-flask-cors
   NOTE: 20250422: Added by Front-Desk (rouca)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ab5781fd543e4284c4f4f263f1b65d28dc832d71

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ab5781fd543e4284c4f4f263f1b65d28dc832d71
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250427/457a79c8/attachment.htm>