[Git][security-tracker-team/security-tracker][master] Restore for now package note for CVE-2024-6844 as we need to revisit the assessment yet
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat May 31 15:06:04 BST 2025
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
c2c4ad2e by Salvatore Bonaccorso at 2025-05-31T16:05:12+02:00
Restore for now package note for CVE-2024-6844 as we need to revisit the assessment yet
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -24008,7 +24008,7 @@ CVE-2024-6851 (In version 3.22.0 of aimhubio/aim, the LocalFileManager._cleanup
CVE-2024-6844 (A vulnerability in corydolphin/flask-cors version 4.0.1 allows for inc ...)
{DLA-4197-1}
- python-flask-cors 6.0.0-1 (bug #1100988)
- [bookworm] - python-flask-cors <postponed> (Minor issue)
+ [bookworm] - python-flask-cors <postponed> (Minor issue, revisit when fixed upstream)
NOTE: https://huntr.com/bounties/731a6cd4-d05f-4fe6-8f5b-fe088d7b34e0
NOTE: https://github.com/corydolphin/flask-cors/issues/385
NOTE: https://github.com/advisories/GHSA-8vgw-p6qm-5gr7
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c2c4ad2e1b2fa0a64c4f952dc702e92b94779228
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c2c4ad2e1b2fa0a64c4f952dc702e92b94779228
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250531/dfd922fe/attachment.htm>
More information about the debian-security-tracker-commits
mailing list