Debian LTS: DLA-3984-1: zabbix Security Advisory Updates

CVE-2024-36464

When exporting media types, the password is exported in the YAML in
plain text. This appears to be a best practices type issue and may
have no actual impact. The user would need to have permissions to
access the media types and therefore would be expected to have
access to these passwords.

CVE-2024-42330

The HttpRequest object allows to get the HTTP headers from the
server's response after sending the request. The problem is that the
returned strings are created directly from the data returned by the
server and are not correctly encoded for JavaScript. This allows to
create internal strings that can be used to access hidden properties
of objects.

CVE-2024-42331

In the src/libs/zbxembed/browser.c file, the es_browser_ctor method
retrieves a heap pointer from the Duktape JavaScript engine. This
heap pointer is subsequently utilized by the browser_push_error
method in the src/libs/zbxembed/browser_error.c file. A