[Git][security-tracker-team/security-tracker][master] Add CVE-2022-21648/php-nettle

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Jan 5 09:30:34 GMT 2022



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
69bae128 by Salvatore Bonaccorso at 2022-01-05T10:29:39+01:00
Add CVE-2022-21648/php-nettle

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7962,7 +7962,9 @@ CVE-2022-21650 (Convos is an open source multi-user chat that runs in a web brow
 CVE-2022-21649 (Convos is an open source multi-user chat that runs in a web browser. C ...)
 	NOT-FOR-US: Convos
 CVE-2022-21648 (Latte is an open source template engine for PHP. Versions since 2.8.0  ...)
-	TODO: check
+	- php-nette <removed>
+	NOTE: https://github.com/nette/latte/security/advisories/GHSA-36m2-8rhx-f36j
+	NOTE: https://github.com/nette/latte/commit/9e1b4f7d70f7a9c3fa6753ffa7d7e450a3d4abb0
 CVE-2022-21647 (CodeIgniter is an open source PHP full-stack web framework. Deserializ ...)
 	TODO: check
 CVE-2022-21646



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/69bae1282ec8d0436d15d1ea5a0adf3e475a5a69

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/69bae1282ec8d0436d15d1ea5a0adf3e475a5a69
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220105/7e6359ef/attachment.htm>


More information about the debian-security-tracker-commits mailing list