[Git][security-tracker-team/security-tracker][master] new otrs issues
Moritz Muehlenhoff
jmm at debian.org
Mon Oct 12 12:28:36 BST 2020
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
c8964697 by Moritz Muehlenhoff at 2020-10-12T13:28:06+02:00
new otrs issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -36914,8 +36914,11 @@ CVE-2020-11023 (In jQuery versions greater than or equal to 1.0.3 and before 3.5
[jessie] - drupal7 <not-affected> (Vulnerable code not embedded)
- node-jquery 3.5.0+dfsg-2
[buster] - node-jquery <no-dsa> (Minor issue)
+ - otrs2 6.0.30-1
+ [buster] - otrs2 <no-dsa> (Non-free not supported)
NOTE: https://github.com/jquery/jquery/security/advisories/GHSA-jpcq-cgw6-v4j6
NOTE: https://www.drupal.org/sa-core-2020-002
+ NOTE: https://otrs.com/release-notes/otrs-security-advisory-2020-14/
CVE-2020-11022 (In jQuery versions greater than or equal to 1.2 and before 3.5.0, pass ...)
{DSA-4693-1}
- jquery <removed>
@@ -36926,9 +36929,12 @@ CVE-2020-11022 (In jQuery versions greater than or equal to 1.2 and before 3.5.0
[buster] - node-jquery <no-dsa> (Minor issue)
- drupal7 <removed>
[jessie] - drupal7 <not-affected> (Vulnerable code not embedded)
+ - otrs2 6.0.30-1
+ [buster] - otrs2 <no-dsa> (Non-free not supported)
NOTE: https://github.com/jquery/jquery/security/advisories/GHSA-gxr4-xjj5-5px2
NOTE: https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77
NOTE: https://www.drupal.org/sa-core-2020-002
+ NOTE: https://otrs.com/release-notes/otrs-security-advisory-2020-14/
CVE-2020-11021 (Actions Http-Client (NPM @actions/http-client) before version 1.0.8 ca ...)
NOT-FOR-US: Actions Http-Client
CVE-2020-11020 (Faye (NPM, RubyGem) versions greater than 0.5.0 and before 1.0.4, 1.1. ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c8964697bce5fe24eb517e03fc43200ee55300bf
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c8964697bce5fe24eb517e03fc43200ee55300bf
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201012/d7407633/attachment.html>
More information about the debian-security-tracker-commits
mailing list