[Git][security-tracker-team/security-tracker][master] automatic update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d42ee2f7 by security tracker role at 2021-07-25T20:10:31+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,7 @@
+CVE-2021-37438
+	RESERVED
+CVE-2021-37437
+	RESERVED
 CVE-2021-37436 (Amazon Echo Dot devices through 2021-07-02 sometimes allow attackers,  ...)
 	TODO: check
 CVE-2021-37435
@@ -65,8 +69,8 @@ CVE-2021-XXXX [Remote Information Disclosure]
 	NOTE: https://prosody.im/security/advisory_20210722/
 CVE-2021-37404
 	RESERVED
-CVE-2021-3663
-	RESERVED
+CVE-2021-3663 (firefly-iii is vulnerable to Improper Restriction of Excessive Authent ...)
+	TODO: check
 CVE-2021-3662
 	RESERVED
 CVE-2021-3661
@@ -33407,8 +33411,8 @@ CVE-2021-23415
 	RESERVED
 CVE-2021-23414
 	RESERVED
-CVE-2021-23413
-	RESERVED
+CVE-2021-23413 (This affects the package jszip before 3.7.0. Crafting a new zip file w ...)
+	TODO: check
 CVE-2021-23412 (All versions of package gitlogplus are vulnerable to Command Injection ...)
 	TODO: check
 CVE-2021-23411 (All versions of package anchorme are vulnerable to Cross-site Scriptin ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d42ee2f748ed444fbc1bb5f60f56fd56d564fd82

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d42ee2f748ed444fbc1bb5f60f56fd56d564fd82
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210725/76835dea/attachment-0001.htm>