[Git][security-tracker-team/security-tracker][master] Associate two CVEs with brave-browser (itp'ed)
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Jul 12 21:22:35 BST 2021
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
0dc0d85f by Salvatore Bonaccorso at 2021-07-12T22:21:51+02:00
Associate two CVEs with brave-browser (itp'ed)
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -32530,9 +32530,9 @@ CVE-2021-22918 (Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-
NOTE: https://nodejs.org/en/blog/vulnerability/july-2021-security-releases/
NOTE: https://github.com/nodejs/node/commit/d33aead28bcec32a2a450f884907a6d971631829
CVE-2021-22917 (Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to ...)
- TODO: check
+ - brave-browser <itp> (bug #864795)
CVE-2021-22916 (In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is ...)
- TODO: check
+ - brave-browser <itp> (bug #864795)
CVE-2021-22915 (Nextcloud server before 19.0.11, 20.0.10, 21.0.2 is vulnerable to brut ...)
- nextcloud-server <itp> (bug #941708)
CVE-2021-22914 (Citrix Cloud Connector before 6.31.0.62192 suffers from insecure stora ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0dc0d85f8ecdce01aeb05b3fad1a68d935d8cdfe
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0dc0d85f8ecdce01aeb05b3fad1a68d935d8cdfe
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210712/968c38ad/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list