[Git][security-tracker-team/security-tracker][master] update status for CVE-2024-58392

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c9986f15 by Moritz Muehlenhoff at 2026-10-18T19:52:45+02:00
update status for CVE-2024-58392

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5897,7 +5897,11 @@ CVE-2025-9373 (The PeproDev Branches Map plugin for WordPress is vulnerable to S
 CVE-2025-71433 (Kaneo before 2.1.6 contains a missing authorization vulnerability that ...)
 	NOT-FOR-US: Kaneo
 CVE-2024-58392 (PhysicsFS through 3.2.0 contains an out-of-bounds read vulnerability i ...)
-	NOT-FOR-US: PhysicsFS
+	- libphysfs <unfixed> (unimportant)
+	NOTE: https://github.com/icculus/physfs/commit/8a90802778f14dea9c086fb5436839181a3222d5
+	NOTE: https://github.com/icculus/physfs/issues/79
+	NOTE: https://github.com/icculus/physfs/pull/80
+	NOTE: Negligible security impact
 CVE-2020-37282 (office-converter through 1.0.2 contains an OS command injection vulner ...)
 	NOT-FOR-US: office-converter
 CVE-2020-37281 (Gravitee API Management through 4.12.22 contains an authentication byp ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c9986f15aed65e5839a47b6e72e0eccbcf09b101

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c9986f15aed65e5839a47b6e72e0eccbcf09b101
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261018/d80f9297/attachment.htm>