[Git][security-tracker-team/security-tracker][master] Add CVE-2021-4209{6,7}/mailman

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0368afab by Salvatore Bonaccorso at 2021-10-21T21:50:01+02:00
Add CVE-2021-4209{6,7}/mailman

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2728,9 +2728,17 @@ CVE-2021-42099
 CVE-2021-42098 (An incomplete permission check on entries in Devolutions Remote Deskto ...)
 	NOT-FOR-US: Devolutions
 CVE-2021-42097 (GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csr ...)
-	TODO: check
+	- mailman <removed>
+	NOTE: Fixed by: https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1873
+	NOTE: https://bugs.launchpad.net/mailman/+bug/1947640
+	NOTE: https://mail.python.org/archives/list/mailman-announce@python.org/thread/IKCO6JU755AP5G5TKMBJL6IEZQTTNPDQ/
+	NOTE: https://www.openwall.com/lists/oss-security/2021/10/21/4
 CVE-2021-42096 (GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A cer ...)
-	TODO: check
+	- mailman <removed>
+	NOTE: Fixed by: https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1873
+	NOTE: https://bugs.launchpad.net/mailman/+bug/1947639
+	NOTE: https://mail.python.org/archives/list/mailman-announce@python.org/thread/IKCO6JU755AP5G5TKMBJL6IEZQTTNPDQ/
+	NOTE: https://www.openwall.com/lists/oss-security/2021/10/21/4
 CVE-2021-42095 (Xshell before 7.0.0.76 allows attackers to cause a crash by triggering ...)
 	NOT-FOR-US: NetSarang Xshell
 CVE-2021-42094 (An issue was discovered in Zammad before 4.1.1. Command Injection can  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0368afab430bebaa1d1ab2a02eb3e84ee7662e83

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0368afab430bebaa1d1ab2a02eb3e84ee7662e83
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211021/cab89576/attachment.htm>