[Git][security-tracker-team/security-tracker][master] mark CVE-2024-39936 as unimportant for the gles package

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
99a70753 by Moritz Mühlenhoff at 2025-05-01T12:05:25+02:00
mark CVE-2024-39936 as unimportant for the gles package

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -86644,12 +86644,13 @@ CVE-2024-39936 (An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x befor
 	[bookworm] - qtbase-opensource-src <no-dsa> (Minor issue)
 	[bullseye] - qtbase-opensource-src <no-dsa> (Minor issue)
 	[experimental] - qtbase-opensource-src-gles 5.15.15+dfsg-1
-	- qtbase-opensource-src-gles <unfixed> (bug #1077544)
+	- qtbase-opensource-src-gles <unfixed> (unimportant; bug #1077544)
 	[bookworm] - qtbase-opensource-src-gles <no-dsa> (Minor issue)
 	[bullseye] - qtbase-opensource-src-gles <no-dsa> (Minor issue)
 	NOTE: https://codereview.qt-project.org/c/qt/qtbase/+/571601
 	NOTE: https://codereview.qt-project.org/gitweb?p=qt%2Fqtbase.git;a=commit;h=b1e75376cc3adfc7da5502a277dfe9711f3e0536
 	NOTE: https://github.com/qt/qtbase/commit/0fb43e4395da34d561814242a0186999e4956e28 (v6.8.0-beta3)
+	NOTE: The -gles package doesn't build the HTTP2 code, only included in the source package
 CVE-2024-39935 (jc21 NGINX Proxy Manager before 2.11.3 allows backend/internal/certifi ...)
 	NOT-FOR-US: jc21 NGINX Proxy Manager
 CVE-2024-39485 (In the Linux kernel, the following vulnerability has been resolved:  m ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99a7075340034f0c49754820881bf5c038ea5dfa

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99a7075340034f0c49754820881bf5c038ea5dfa
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250501/60c5a4b7/attachment.htm>