[Git][security-tracker-team/security-tracker][master] two more node spu

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9987a9ec by Moritz Mühlenhoff at 2022-12-04T21:31:30+01:00
two more node spu

- - - - -


2 changed files:

- data/CVE/list
- data/next-point-update.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -50296,6 +50296,7 @@ CVE-2022-29168 (Wire is a secure messaging application. Wire is vulnerable to ar
 	NOT-FOR-US: wire-webapp
 CVE-2022-29167 (Hawk is an HTTP authentication scheme providing mechanisms for making  ...)
 	- node-hawk 9.0.1-1
+	[bullseye] - node-hawk <no-dsa> (Minor issue)
 	NOTE: https://github.com/mozilla/hawk/security/advisories/GHSA-44pw-h2cw-w3vq
 	NOTE: https://github.com/mozilla/hawk/pull/286
 	NOTE: https://github.com/mozilla/hawk/commit/ade134119bf1fdc4909d00f5a952c966f0075ad3
@@ -62373,6 +62374,7 @@ CVE-2022-25000
 	RESERVED
 CVE-2022-24999 (qs before 6.10.3, as used in Express before 4.17.3 and other products, ...)
 	- node-qs 6.10.3+ds+~6.9.7-1
+	[bullseye] - node-qs <no-dsa> (Minor issue)
 	NOTE: https://github.com/ljharb/qs/pull/428
 CVE-2022-24998
 	RESERVED


=====================================
data/next-point-update.txt
=====================================
@@ -160,3 +160,7 @@ CVE-2022-32088
 	[bullseye] - mariadb-10.5 1:10.5.18-0+deb11u1
 CVE-2022-38791
 	[bullseye] - mariadb-10.5 1:10.5.18-0+deb11u1
+CVE-2022-24999
+	[bullseye] - node-qs 6.9.4+ds-1+deb11u1
+CVE-2022-29167
+	[bullseye] - node-hawk 8.0.1+dfsg-2+deb11u1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9987a9ec494064e1f356fe9548050e3a9d75ffd3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9987a9ec494064e1f356fe9548050e3a9d75ffd3
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221204/855501b4/attachment-0001.htm>