[Git][security-tracker-team/security-tracker][master] CVE-2024-36621/bullseye

Bastien Roucariès (@rouca) rouca at debian.org
Mon Jan 13 15:49:47 GMT 2025



Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f94ef771 by Bastien Roucariès at 2025-01-13T15:49:03+00:00
CVE-2024-36621/bullseye

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11411,6 +11411,7 @@ CVE-2024-36622 (In RaspAP raspap-webgui 3.0.9 and earlier, a command injection v
 	NOT-FOR-US: RaspAP raspap-webgui
 CVE-2024-36621 (moby v25.0.5 is affected by a Race Condition in builder/builder-next/a ...)
 	- docker.io 26.1.4+dfsg1-9
+	[bullseye] - docker.io <postponed> (minor; DoS by ressource leak)
 	NOTE: https://github.com/moby/moby/commit/37545cc644344dcb576cba67eb7b6f51a463d31e (v26.0.0-rc2)
 CVE-2024-36620 (moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via d ...)
 	- docker.io <not-affected> (Vunerable code never present in a Debian released Version)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f94ef7716bbc7e76d9ab4f5a858314d81b2a4186

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f94ef7716bbc7e76d9ab4f5a858314d81b2a4186
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250113/b87f8887/attachment.htm>


More information about the debian-security-tracker-commits mailing list