[Git][security-tracker-team/security-tracker][master] Add Debian bug references for ckeditor issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Aug 16 21:04:45 BST 2021
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
e48c8afc by Salvatore Bonaccorso at 2021-08-16T22:04:03+02:00
Add Debian bug references for ckeditor issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2620,7 +2620,7 @@ CVE-2021-37697 (tmerc-cogs are a collection of open source plugins for the Red D
CVE-2021-37696 (tmerc-cogs are a collection of open source plugins for the Red Discord ...)
NOT-FOR-US: tmerc-cogs
CVE-2021-37695 (ckeditor is an open source WYSIWYG HTML editor with rich content suppo ...)
- - ckeditor <unfixed>
+ - ckeditor <unfixed> (bug #992290)
NOTE: https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-m94c-37g6-cjhc
NOTE: https://github.com/ckeditor/ckeditor4/commit/de3c001540715f9c3801aaa38a1917de46cfcf58
CVE-2021-37694 (@asyncapi/java-spring-cloud-stream-template generates a Spring Cloud S ...)
@@ -13809,12 +13809,12 @@ CVE-2021-32811 (Zope is an open-source web application server. Zope versions pri
CVE-2021-32810 (crossbeam-deque is a package of work-stealing deques for building task ...)
TODO: check
CVE-2021-32809 (ckeditor is an open source WYSIWYG HTML editor with rich content suppo ...)
- - ckeditor <unfixed>
+ - ckeditor <unfixed> (bug #992291)
NOTE: https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-7889-rm5j-hpgg
NOTE: https://github.com/ckeditor/ckeditor4/commit/f6856decd5992b2b07945292416bb113d5f7ff82 (v4.16.2)
NOTE: Introduced by https://github.com/ckeditor/ckeditor4/commit/ca0851c7a14f616a0c4cda905816aa87ca399efb (v4.5.2)
CVE-2021-32808 (ckeditor is an open source WYSIWYG HTML editor with rich content suppo ...)
- - ckeditor <unfixed>
+ - ckeditor <unfixed> (bug #992292)
[buster] - ckeditor <not-affected> (Vulnerable code introduced later)
[stretch] - ckeditor <not-affected> (Vulnerable code introduced later)
NOTE: https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-6226-h7ff-ch6c
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e48c8afc60076548278aae3c43b70cfa6e508b73
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e48c8afc60076548278aae3c43b70cfa6e508b73
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210816/7fd2658e/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list