[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Jul 29 09:10:22 BST 2021



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1251b771 by security tracker role at 2021-07-29T08:10:15+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,7 @@
+CVE-2021-37607
+	RESERVED
+CVE-2021-3669
+	RESERVED
 CVE-2021-37606 (Meow hash 0.5/calico does not sufficiently thwart key recovery by an a ...)
 	TODO: check
 CVE-2021-37605
@@ -66,8 +70,8 @@ CVE-2021-3667
 	[stretch] - libvirt <not-affected> (Introduced in 4.1)
 	NOTE: https://libvirt.org/git/?p=libvirt.git;a=commit;h=447f69dec47e1b0bd15ecd7cd49a9fd3b050fb87
 	NOTE: Introduced in https://libvirt.org/git/?p=libvirt.git;a=commit;h=7aa0e8c0cb8a6293d0c6f7e3d29c13b96dec2129
-CVE-2021-37578
-	RESERVED
+CVE-2021-37578 (Apache jUDDI uses several classes related to Java's Remote Method Invo ...)
+	TODO: check
 CVE-2021-37577
 	RESERVED
 CVE-2021-37575
@@ -80294,8 +80298,8 @@ CVE-2020-15950 (Immuta v2.8.2 is affected by improper session management: user s
 	NOT-FOR-US: Immuta
 CVE-2020-15949 (Immuta v2.8.2 is affected by one instance of insecure permissions that ...)
 	NOT-FOR-US: Immuta
-CVE-2020-15948
-	RESERVED
+CVE-2020-15948 (eGain Chat 15.5.5 allows XSS via the Name (aka full_name) field. ...)
+	TODO: check
 CVE-2020-25573 (An issue was discovered in the linked-hash-map crate before 0.5.3 for  ...)
 	- rust-linked-hash-map 0.5.4-1 (bug #966246)
 	[buster] - rust-linked-hash-map <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1251b771f5d7586ca202d4719481db120216d7b2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1251b771f5d7586ca202d4719481db120216d7b2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210729/a25df97c/attachment.htm>


More information about the debian-security-tracker-commits mailing list