[Git][security-tracker-team/security-tracker][master] consul fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
58febc20 by Moritz Muehlenhoff at 2022-08-23T20:31:45+02:00
consul fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -72019,7 +72019,7 @@ CVE-2021-38700
 CVE-2021-38699 (TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashb ...)
 	NOT-FOR-US: TastyIgniter
 CVE-2021-38698 (HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allow ...)
-	- consul <unfixed> (bug #1015218)
+	- consul 1.8.7+dfsg1-6 (bug #1015218)
 	[bullseye] - consul <no-dsa> (Minor issue)
 	[buster] - consul <no-dsa> (Minor issue)
 	NOTE: https://discuss.hashicorp.com/t/hcsec-2021-24-consul-missing-authorization-check-on-txn-apply-endpoint/29026
@@ -75942,7 +75942,7 @@ CVE-2021-37220 (MuPDF through 1.18.1 has an out-of-bounds write because the cach
 	NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=703791
 	NOTE: On Stretch, an earlier version of the code exits early instead of crashing.
 CVE-2021-37219 (HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows no ...)
-	- consul <unfixed> (bug #1015218)
+	- consul 1.8.7+dfsg1-6 (bug #1015218)
 	NOTE: https://discuss.hashicorp.com/t/hcsec-2021-22-consul-raft-rpc-privilege-escalation/29024
 CVE-2021-37218 (HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server  ...)
 	- nomad <unfixed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/58febc208bd610f379aaec6817c1c17718f865e3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/58febc208bd610f379aaec6817c1c17718f865e3
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220823/16ad178b/attachment-0001.htm>