[Git][security-tracker-team/security-tracker][master] Add three new ckeditor issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0cd0b78c by Salvatore Bonaccorso at 2021-08-13T21:27:20+02:00
Add three new ckeditor issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2108,7 +2108,9 @@ CVE-2021-37697 (tmerc-cogs are a collection of open source plugins for the Red D
 CVE-2021-37696 (tmerc-cogs are a collection of open source plugins for the Red Discord ...)
 	TODO: check
 CVE-2021-37695 (ckeditor is an open source WYSIWYG HTML editor with rich content suppo ...)
-	TODO: check
+	- ckeditor <unfixed>
+	NOTE: https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-m94c-37g6-cjhc
+	NOTE: https://github.com/ckeditor/ckeditor4/commit/de3c001540715f9c3801aaa38a1917de46cfcf58
 CVE-2021-37694 (@asyncapi/java-spring-cloud-stream-template generates a Spring Cloud S ...)
 	TODO: check
 CVE-2021-37693
@@ -13287,9 +13289,11 @@ CVE-2021-32811 (Zope is an open-source web application server. Zope versions pri
 CVE-2021-32810 (crossbeam-deque is a package of work-stealing deques for building task ...)
 	TODO: check
 CVE-2021-32809 (ckeditor is an open source WYSIWYG HTML editor with rich content suppo ...)
-	TODO: check
+	- ckeditor <unfixed>
+	NOTE: https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-7889-rm5j-hpgg
 CVE-2021-32808 (ckeditor is an open source WYSIWYG HTML editor with rich content suppo ...)
-	TODO: check
+	- ckeditor <unfixed>
+	NOTE: https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-6226-h7ff-ch6c
 CVE-2021-32807 (The module `AccessControl` defines security policies for Python code u ...)
 	NOT-FOR-US: Zope AccessControl
 CVE-2021-32806 (Products.isurlinportal is a replacement for isURLInPortal method in Pl ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0cd0b78c06543138e2d6789efa5cab3f3231e11b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0cd0b78c06543138e2d6789efa5cab3f3231e11b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210813/dd405bd6/attachment.htm>