[Git][security-tracker-team/security-tracker][master] new jq issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b6dc5b0d by Moritz Muehlenhoff at 2025-05-22T08:31:32+02:00
new jq issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -175,7 +175,10 @@ CVE-2024-56428 (The local iLabClient database in itech iLabClient 3.7.1 allows l
 CVE-2024-42922 (AAPanel v7.0.7 was discovered to contain an OS command injection vulne ...)
 	TODO: check
 CVE-2024-23337 (jq is a command-line JSON processor. In versions up to and including 1 ...)
-	TODO: check
+	- jq <unfixed> (unimportant)
+	NOTE: https://github.com/jqlang/jq/security/advisories/GHSA-2q6r-344g-cx46
+	NOTE: https://github.com/jqlang/jq/issues/3262
+	NOTE: https://github.com/jqlang/jq/commit/de21386681c0df0104a99d9d09db23a9b2a78b1e
 CVE-2024-12561 (The Affiliate Sales in Google Analytics and other tools plugin for Wor ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-40775 (When an incoming DNS protocol message includes a Transaction Signature ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b6dc5b0d04468459de3664b998cf2e1754e0ebde

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b6dc5b0d04468459de3664b998cf2e1754e0ebde
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250522/451a1857/attachment.htm>