[Git][security-tracker-team/security-tracker][master] Add three new ledgersmb issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
40b3ebe3 by Salvatore Bonaccorso at 2021-08-23T14:15:24+02:00
Add three new ledgersmb issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -534,8 +534,10 @@ CVE-2021-39358 (In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not en
 	- gfbgraph <unfixed>
 	NOTE: https://blogs.gnome.org/mcatanzaro/2021/05/25/reminder-soupsessionsync-and-soupsessionasync-default-to-no-tls-certificate-verification/
 	NOTE: https://gitlab.gnome.org/GNOME/libgfbgraph/-/issues/17
-CVE-2021-3731
+CVE-2021-3731 [Clickjacking vulnerability]
 	RESERVED
+	- ledgersmb <unfixed>
+	NOTE: https://ledgersmb.org/cve-2021-3731-clickjacking
 CVE-2021-39357
 	RESERVED
 CVE-2021-39356
@@ -2835,10 +2837,14 @@ CVE-2021-38296
 	RESERVED
 CVE-2021-38295
 	RESERVED
-CVE-2021-3694
+CVE-2021-3694 [cross-site scripting]
 	RESERVED
-CVE-2021-3693
+	- ledgersmb <unfixed>
+	NOTE: https://ledgersmb.org/cve-2021-3694-cross-site-scripting
+CVE-2021-3693 [cross-site scripting]
 	RESERVED
+	- ledgersmb <unfixed>
+	NOTE: https://ledgersmb.org/cve-2021-3693-cross-site-scripting
 CVE-2021-3692 (yii2 is vulnerable to Use of Predictable Algorithm in Random Number Ge ...)
 	- yii <itp> (bug #597899)
 CVE-2021-38294



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/40b3ebe332edae8f154b035872731bdf2c0e30e1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/40b3ebe332edae8f154b035872731bdf2c0e30e1
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210823/a5d4add2/attachment.htm>