[Git][security-tracker-team/security-tracker][master] Add CVE-2021-3271{8,9}/rabbitmq-server

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Jun 29 21:38:06 BST 2021



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
eee4c7cd by Salvatore Bonaccorso at 2021-06-29T22:37:22+02:00
Add CVE-2021-3271{8,9}/rabbitmq-server

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7126,9 +7126,13 @@ CVE-2021-32721 (PowerMux is a drop-in replacement for Go's http.ServeMux. In Pow
 CVE-2021-32720 (Sylius is an Open Source eCommerce platform on top of Symfony. In vers ...)
 	NOT-FOR-US: Sylius
 CVE-2021-32719 (RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prio ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-5452-hxj4-773x
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/pull/3122
 CVE-2021-32718 (RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prio ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-c3hj-rg5h-2772
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/pull/3028
 CVE-2021-32717 (Shopware is an open source eCommerce platform. In versions prior to 6. ...)
 	NOT-FOR-US: Shopware
 CVE-2021-32716 (Shopware is an open source eCommerce platform. In versions prior to 6. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eee4c7cda43034b841ffe984ca7ff1d42fdd5611

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eee4c7cda43034b841ffe984ca7ff1d42fdd5611
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210629/f68d134a/attachment.htm>


More information about the debian-security-tracker-commits mailing list