[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2021-37698: Expand list of commits from GHSA-cxfm-8j5v-5qr2 merge

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7203702d by Salvatore Bonaccorso at 2021-11-03T20:59:19+01:00
CVE-2021-37698: Expand list of commits from GHSA-cxfm-8j5v-5qr2 merge

- - - - -
c72c243d by Salvatore Bonaccorso at 2021-11-03T20:59:45+01:00
Reference upstream tag for CVE-2021-32743 and CVE-2021-32739

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -15470,10 +15470,11 @@ CVE-2021-37698 (Icinga is a monitoring system which checks the availability of n
 	- icinga2 2.13.1-1
 	NOTE: https://github.com/Icinga/icinga2/security/advisories/GHSA-cxfm-8j5v-5qr2
 	NOTE: https://icinga.com/blog/2021/08/19/icinga-2-13-1-security-release/
-	NOTE: https://github.com/Icinga/icinga2/commit/6db8795ca4b6a853f49615279f068d4cf2b42087 (support/2.12)
-	NOTE: https://github.com/Icinga/icinga2/commit/d7133ae4298d133a088b25c9a71ffeb1f8164a8d (support/2.12)
-	NOTE: https://github.com/Icinga/icinga2/commit/bf535969ac23962b65b72ea3893c6b384e1d3218 (support/2.12)
-	NOTE: https://github.com/Icinga/icinga2/commits/support/2.12
+	NOTE: https://github.com/Icinga/icinga2/commit/8910abc5882774c067dfc22cdf8bf8b830257608 (v2.12.6)
+	NOTE: https://github.com/Icinga/icinga2/commit/bf535969ac23962b65b72ea3893c6b384e1d3218 (v2.12.6)
+	NOTE: https://github.com/Icinga/icinga2/commit/d7133ae4298d133a088b25c9a71ffeb1f8164a8d (v2.12.6)
+	NOTE: https://github.com/Icinga/icinga2/commit/6db8795ca4b6a853f49615279f068d4cf2b42087 (v2.12.6)
+	NOTE: https://github.com/Icinga/icinga2/commit/b7dd909a30367a4b8389e9362f05a856bbd7b081 (v2.12.6)
 CVE-2021-37697 (tmerc-cogs are a collection of open source plugins for the Red Discord ...)
 	NOT-FOR-US: tmerc-cogs
 CVE-2021-37696 (tmerc-cogs are a collection of open source plugins for the Red Discord ...)
@@ -27225,7 +27226,7 @@ CVE-2021-32743 (Icinga is a monitoring system which checks the availability of n
 	- icinga2 2.12.5-1 (bug #991494)
 	NOTE: https://icinga.com/blog/2021/07/15/releasing-icinga-2-12-5-and-2-11-10/
 	NOTE: https://github.com/Icinga/icinga2/security/advisories/GHSA-wrpw-pmr8-qgj7
-	NOTE: https://github.com/Icinga/icinga2/commit/843353ab69f79b3abfeb38ac249b05e1944369ab (support/2.12)
+	NOTE: https://github.com/Icinga/icinga2/commit/843353ab69f79b3abfeb38ac249b05e1944369ab (v2.12.5)
 CVE-2021-32742 (Vapor is a web framework for Swift. In versions 4.47.1 and prior, bug  ...)
 	NOT-FOR-US: Vapor
 CVE-2021-32741 (Nextcloud Server is a Nextcloud package that handles data storage. In  ...)
@@ -27240,7 +27241,7 @@ CVE-2021-32739 (Icinga is a monitoring system which checks the availability of n
 	- icinga2 2.12.5-1 (bug #991494)
 	NOTE: https://icinga.com/blog/2021/07/15/releasing-icinga-2-12-5-and-2-11-10/
 	NOTE: https://github.com/Icinga/icinga2/security/advisories/GHSA-98wp-jc6q-x5q5
-	NOTE: https://github.com/Icinga/icinga2/commit/b5b83fa51564662ff2e78d7529ff77e1085d4522 (support/2.12)
+	NOTE: https://github.com/Icinga/icinga2/commit/b5b83fa51564662ff2e78d7529ff77e1085d4522 (v2.12.5)
 CVE-2021-32738 (js-stellar-sdk is a Javascript library for communicating with a Stella ...)
 	NOT-FOR-US: js-stellar-sdk
 CVE-2021-32737 (Sulu is an open-source PHP content management system based on the Symf ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/314981835214a8a2166f2292f256717e75a29cd9...c72c243dfc7684de4276d1ab8dee36abc9aff724

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/314981835214a8a2166f2292f256717e75a29cd9...c72c243dfc7684de4276d1ab8dee36abc9aff724
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211103/4ea292df/attachment.htm>