[Git][security-tracker-team/security-tracker][master] salt fixed in sid

Moritz Muehlenhoff jmm at debian.org
Tue Mar 2 17:20:03 GMT 2021



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ee899adb by Moritz Muehlenhoff at 2021-03-02T18:19:43+01:00
salt fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5309,7 +5309,7 @@ CVE-2020-36201 (An issue was discovered in certain Xerox WorkCentre products. Th
 CVE-2019-25015 (LuCI in OpenWrt 18.06.0 through 18.06.4 allows stored XSS via a crafte ...)
 	NOT-FOR-US: LuCI in OpenWrt
 CVE-2021-3197 (An issue was discovered in SaltStack Salt before 3002.5. The salt-api' ...)
-	- salt <unfixed> (bug #983632)
+	- salt 3002.5+dfsg1-1 (bug #983632)
 	NOTE: https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
 CVE-2021-3196
 	RESERVED
@@ -6231,16 +6231,16 @@ CVE-2021-25286
 CVE-2021-25285
 	RESERVED
 CVE-2021-25284 (An issue was discovered in through SaltStack Salt before 3002.5. salt. ...)
-	- salt <unfixed> (bug #983632)
+	- salt 3002.5+dfsg1-1 (bug #983632)
 	NOTE: https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
 CVE-2021-25283 (An issue was discovered in through SaltStack Salt before 3002.5. The j ...)
-	- salt <unfixed> (bug #983632)
+	- salt 3002.5+dfsg1-1 (bug #983632)
 	NOTE: https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
 CVE-2021-25282 (An issue was discovered in through SaltStack Salt before 3002.5. The s ...)
-	- salt <unfixed> (bug #983632)
+	- salt 3002.5+dfsg1-1 (bug #983632)
 	NOTE: https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
 CVE-2021-25281 (An issue was discovered in through SaltStack Salt before 3002.5. salt- ...)
-	- salt <unfixed> (bug #983632)
+	- salt 3002.5+dfsg1-1 (bug #983632)
 	NOTE: https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
 CVE-2021-XXXX [Unexpected database bindings via requests (follow-up)]
 	- php-laravel-framework 6.20.14+dfsg-1
@@ -6457,7 +6457,7 @@ CVE-2021-3150
 CVE-2021-3149 (On Netshield NANO 25 10.2.18 devices, /usr/local/webmin/System/manual_ ...)
 	NOT-FOR-US: Netshield NANO devices
 CVE-2021-3148 (An issue was discovered in SaltStack Salt before 3002.5. Sending craft ...)
-	- salt <unfixed> (bug #983632)
+	- salt 3002.5+dfsg1-1 (bug #983632)
 	NOTE: https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
 CVE-2021-3147
 	RESERVED
@@ -8642,7 +8642,7 @@ CVE-2021-3146
 CVE-2021-3145
 	RESERVED
 CVE-2021-3144 (In SaltStack Salt before 3002.5, eauth tokens can be used once after e ...)
-	- salt <unfixed> (bug #983632)
+	- salt 3002.5+dfsg1-1 (bug #983632)
 	NOTE: https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
 CVE-2021-3143
 	RESERVED
@@ -15559,7 +15559,7 @@ CVE-2020-35664 (An issue was discovered in Acronis Cyber Protect before 15 Updat
 CVE-2020-35663
 	RESERVED
 CVE-2020-35662 (In SaltStack Salt before 3002.5, when authenticating to services using ...)
-	- salt <unfixed> (bug #983632)
+	- salt 3002.5+dfsg1-1 (bug #983632)
 	NOTE: https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
 CVE-2020-35661
 	RESERVED
@@ -23548,7 +23548,7 @@ CVE-2020-28975 (** DISPUTED ** svm_predict_values in svm.cpp in Libsvm v324, as
 CVE-2020-28973
 	RESERVED
 CVE-2020-28972 (In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsp ...)
-	- salt <unfixed> (bug #983632)
+	- salt 3002.5+dfsg1-1 (bug #983632)
 	NOTE: https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
 CVE-2020-26235 (In Rust time crate from version 0.2.7 and before version 0.2.23, unix- ...)
 	- rust-time <not-affected> (Vulnerable methods introduced in v0.2.7)
@@ -27902,7 +27902,7 @@ CVE-2020-28245
 CVE-2020-28244
 	RESERVED
 CVE-2020-28243 (An issue was discovered in SaltStack Salt before 3002.5. The minion's  ...)
-	- salt <unfixed> (bug #983632)
+	- salt 3002.5+dfsg1-1 (bug #983632)
 	NOTE: https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
 CVE-2020-28242 (An issue was discovered in Asterisk Open Source 13.x before 13.37.1, 1 ...)
 	- asterisk 1:16.15.0~dfsg-1 (bug #974713)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ee899adbd5da6762317a63791ddea71a4ab8c159

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ee899adbd5da6762317a63791ddea71a4ab8c159
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210302/697b7c2c/attachment.htm>


More information about the debian-security-tracker-commits mailing list