[Git][security-tracker-team/security-tracker][master] 2 commits: Triage CVE-2022-29458 in ncurses for stretch LTS.
Chris Lamb (@lamby)
lamby at debian.org
Mon Apr 25 15:52:00 BST 2022
Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker
Commits:
d84a0da5 by Chris Lamb at 2022-04-25T07:50:48-07:00
Triage CVE-2022-29458 in ncurses for stretch LTS.
- - - - -
d3415556 by Chris Lamb at 2022-04-25T07:51:40-07:00
Triage CVE-2021-42948, CVE-2021-42949 & CVE-2022-26564 in hoteldruid for stretch LTS.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -759,6 +759,7 @@ CVE-2022-29458 (ncurses 6.3 before patch 20220416 has an out-of-bounds read and
- ncurses <unfixed> (bug #1009870)
[bullseye] - ncurses <no-dsa> (Minor issue)
[buster] - ncurses <no-dsa> (Minor issue)
+ [stretch] - ncurses <no-dsa> (Minor issue)
NOTE: https://lists.gnu.org/archive/html/bug-ncurses/2022-04/msg00014.html
NOTE: https://lists.gnu.org/archive/html/bug-ncurses/2022-04/msg00016.html
NOTE: https://invisible-island.net/ncurses/NEWS.html#t20220416
@@ -8682,6 +8683,7 @@ CVE-2022-26564
- hoteldruid 3.0.4-1
[bullseye] - hoteldruid <no-dsa> (Minor issue)
[buster] - hoteldruid <no-dsa> (Minor issue)
+ [stretch] - hoteldruid <no-dsa> (Minor issue)
CVE-2022-26563
RESERVED
CVE-2022-26562 (An issue in provider/libserver/ECKrbAuth.cpp of Kopano-Core v11.0.2.51 ...)
@@ -34835,11 +34837,13 @@ CVE-2021-42949
- hoteldruid 3.0.4-1
[bullseye] - hoteldruid <no-dsa> (Minor issue)
[buster] - hoteldruid <no-dsa> (Minor issue)
+ [stretch] - hoteldruid <no-dsa> (Minor issue)
CVE-2021-42948
RESERVED
- hoteldruid 3.0.4-1
[bullseye] - hoteldruid <no-dsa> (Minor issue)
[buster] - hoteldruid <no-dsa> (Minor issue)
+ [stretch] - hoteldruid <no-dsa> (Minor issue)
CVE-2021-42947
RESERVED
CVE-2021-42946 (A Cross Site Scripting (XSS) vulnerability exists in htmly.2.8.1 via t ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/e53f693bbc45102219ed7bd0dbd97b32936a06cc...d3415556270cc6f089a12668049302a00c546a31
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/e53f693bbc45102219ed7bd0dbd97b32936a06cc...d3415556270cc6f089a12668049302a00c546a31
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220425/942d7ce4/attachment.htm>
More information about the debian-security-tracker-commits
mailing list