[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2024-44905

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
46d47f94 by Salvatore Bonaccorso at 2025-08-24T09:00:22+02:00
Add Debian bug reference for CVE-2024-44905

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -21847,8 +21847,7 @@ CVE-2024-55567 (Improper input validation was discovered in UsbCoreDxe in Insyde
 CVE-2024-44906 (uptrace pgdriver v1.2.1 was discovered to contain a SQL injection vuln ...)
 	NOT-FOR-US: uptrace pgdriver
 CVE-2024-44905 (go-pg pg v10.13.0 was discovered to contain a SQL injection vulnerabil ...)
-	- golang-gopkg-pg.v5 <undetermined>
-	TODO: check details
+	- golang-gopkg-pg.v5 <unfixed> (bug #1111939)
 	NOTE: https://github.com/advisories/GHSA-6xp3-p59p-q4fj
 	NOTE: Fixed by: https://github.com/go-pg/pg/commit/eff50a43724e52347559687a6945c116afbb41c1 (v10.15.0)
 CVE-2023-45256 (Multiple SQL injection vulnerabilities in the EuroInformation Monetico ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/46d47f94100300d188be5695afc7110ce3944a57

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/46d47f94100300d188be5695afc7110ce3944a57
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250824/db705085/attachment.htm>