[Git][security-tracker-team/security-tracker][master] CVE-2022-25299/phantomjs <removed>, stretch not affected

[Neil Williams (@codehelp)]

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d494eb2a by Neil Williams at 2022-02-23T14:02:31+00:00
CVE-2022-25299/phantomjs <removed>, stretch not affected

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1235,7 +1235,10 @@ CVE-2022-XXXX [Arbitrary File Write Vulnerability ]
 	NOTE: https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-673j-qm5f-xpv8
 	NOTE: https://github.com/pgjdbc/pgjdbc/commit/f6d47034a4ce292e1a659fa00963f6f713117064 (REL42.3.3-rc1)
 CVE-2022-25299 (This affects the package cesanta/mongoose before 7.6. The unsafe handl ...)
-	TODO: check
+	- phantomjs <removed>
+	[stretch] - phantomjs <not-affected> (Vulnerable code introduced later)
+	NOTE: https://github.com/cesanta/mongoose/commit/c65c8fdaaa257e0487ab0aaae9e8f6b439335945
+	NOTE: https://snyk.io/vuln/SNYK-UNMANAGED-CESANTAMONGOOSE-2404180
 CVE-2022-25298 (This affects the package sprinfall/webcc before 0.3.0. It is possible  ...)
 	NOT-FOR-US: webcc
 CVE-2022-25297 (This affects the package drogonframework/drogon before 1.7.5. The unsa ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d494eb2a8e8e87324ae6707a65b954456062a1ba

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d494eb2a8e8e87324ae6707a65b954456062a1ba
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220223/bb299710/attachment.htm>