[Git][security-tracker-team/security-tracker][master] automatic update

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8d6e4e87 by security tracker role at 2021-03-27T20:10:22+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,9 @@
+CVE-2021-29273
+	RESERVED
+CVE-2021-29272 (bluemonday before 1.0.5 allows XSS because certain Go lowercasing conv ...)
+	TODO: check
+CVE-2021-29271 (remark42 before 1.6.1 allows XSS, as demonstrated by "Locator: Locator ...)
+	TODO: check
 CVE-2021-29270
 	RESERVED
 CVE-2021-29269
@@ -4484,7 +4490,7 @@ CVE-2021-27292 (ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expre
 	NOTE: https://gist.github.com/b-c-ds/6941d80d6b4e694df4bc269493b7be76
 	NOTE: https://github.com/faisalman/ua-parser-js/commit/809439e20e273ce0d25c1d04e111dcf6011eb566
 CVE-2021-27291 (In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming ...)
-	{DLA-2600-1}
+	{DSA-4878-1 DLA-2600-1}
 	- pygments <unfixed> (bug #985574)
 	NOTE: https://gist.github.com/b-c-ds/b1a2cc0c68a35c57188575eb496de5ce
 	NOTE: https://github.com/pygments/pygments/commit/2e7e8c4a7b318f4032493773732754e418279a14
@@ -97447,6 +97453,7 @@ CVE-2020-1948 (This vulnerability can affect all Dubbo users stay on version 2.7
 CVE-2020-1947 (In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingS ...)
 	NOT-FOR-US: Apache ShardingSphere
 CVE-2020-1946 (In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf ...)
+	{DSA-4879-1}
 	- spamassassin 3.4.5~pre1-1 (bug #985962)
 	NOTE: https://www.openwall.com/lists/oss-security/2021/03/24/3
 	NOTE: https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7793 (not public)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8d6e4e873db48f494117cc6e3002109d4944ae99

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8d6e4e873db48f494117cc6e3002109d4944ae99
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210327/8fdf23c4/attachment.htm>