[Git][security-tracker-team/security-tracker][master] Update information for CVE-2021-3271{8,9}/rabbitmq-server

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3e741c2e by Salvatore Bonaccorso at 2022-01-02T14:19:05+01:00
Update information for CVE-2021-3271{8,9}/rabbitmq-server

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -36949,19 +36949,24 @@ CVE-2021-32721 (PowerMux is a drop-in replacement for Go's http.ServeMux. In Pow
 CVE-2021-32720 (Sylius is an Open Source eCommerce platform on top of Symfony. In vers ...)
 	NOT-FOR-US: Sylius
 CVE-2021-32719 (RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prio ...)
-	- rabbitmq-server <unfixed> (bug #990524)
+	- rabbitmq-server 3.9.4-1 (bug #990524)
 	[bullseye] - rabbitmq-server <no-dsa> (Minor issue)
 	[buster] - rabbitmq-server <no-dsa> (Minor issue)
 	[stretch] - rabbitmq-server <not-affected> (Vulnerable code not present)
 	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-5452-hxj4-773x
 	NOTE: https://github.com/rabbitmq/rabbitmq-server/pull/3122
+	NOTE: Fixed by: https://github.com/rabbitmq/rabbitmq-server/commit/f01f0f2d840b98128cdb7ff966d8234b06ef7c75 (master)
+	NOTE: Fixed by: https://github.com/rabbitmq/rabbitmq-server/commit/51df93b45fb05f935456f09b88e7554e0b36317f (v3.9.0-beta.1)
+	NOTE: Fixed by: https://github.com/rabbitmq/rabbitmq-server/commit/08beb82e9ab8923ded88ece2800cd80971e2bd05 (v3.8.18)
 CVE-2021-32718 (RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prio ...)
-	- rabbitmq-server <unfixed> (bug #990524)
+	- rabbitmq-server 3.9.4-1 (bug #990524)
 	[bullseye] - rabbitmq-server <no-dsa> (Minor issue)
 	[buster] - rabbitmq-server <no-dsa> (Minor issue)
 	[stretch] - rabbitmq-server <not-affected> (Vulnerable code not present)
 	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-c3hj-rg5h-2772
 	NOTE: https://github.com/rabbitmq/rabbitmq-server/pull/3028
+	NOTE: Fixed by: https://github.com/rabbitmq/rabbitmq-server/commit/a8dffdf7de9793a76fc4685c89b968d8eddca4ca (v3.9.0-beta.1)
+	NOTE: Fixed by: https://github.com/rabbitmq/rabbitmq-server/commit/a7373585faeac0aaede5a9c245094d8022e81299 (v3.8.17-rc.1)
 CVE-2021-32717 (Shopware is an open source eCommerce platform. In versions prior to 6. ...)
 	NOT-FOR-US: Shopware
 CVE-2021-32716 (Shopware is an open source eCommerce platform. In versions prior to 6. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3e741c2e44095af83f5722f61a7c42cb98a851f7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3e741c2e44095af83f5722f61a7c42cb98a851f7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220102/539435cc/attachment.htm>