[Git][security-tracker-team/security-tracker][master] djangorestframework CVEfied

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
60002539 by Moritz Muehlenhoff at 2022-07-23T20:02:47+02:00
djangorestframework CVEfied

- - - - -


2 changed files:

- data/CVE/list
- data/DSA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -51,7 +51,9 @@ CVE-2022-2517
 CVE-2022-2516
 	RESERVED
 CVE-2018-25045 (Django REST framework (aka django-rest-framework) before 3.9.1 allows  ...)
-	TODO: check
+	- djangorestframework 3.10.2-1
+	[buster] - djangorestframework 3.9.0-1+deb10u1
+	NOTE: https://github.com/encode/django-rest-framework/commit/4bb9a3c48427867ef1e46f7dee945a4c25a4f9b8 (3.9.1)
 CVE-2022-36407
 	RESERVED
 CVE-2022-36389
@@ -128,10 +130,6 @@ CVE-2022-2511 (Cross-site Scripting (XSS) vulnerability in the "commonuserinterf
 	NOT-FOR-US: BlueSpice
 CVE-2022-2510 (Cross-site Scripting (XSS) vulnerability in "Extension:ExtendedSearch" ...)
 	NOT-FOR-US: BlueSpice
-CVE-2019-XXXX [djangorestframework XSS]
-	- djangorestframework 3.10.2-1
-	[buster] - djangorestframework 3.9.0-1+deb10u1
-	NOTE: https://github.com/encode/django-rest-framework/commit/4bb9a3c48427867ef1e46f7dee945a4c25a4f9b8 (3.9.1)
 CVE-2022-36372
 	RESERVED
 CVE-2022-36367


=====================================
data/DSA/list
=====================================
@@ -6,7 +6,7 @@
 	{CVE-2022-2163 CVE-2022-2477 CVE-2022-2478 CVE-2022-2479 CVE-2022-2480 CVE-2022-2481}
 	[bullseye] - chromium 103.0.5060.134-1~deb11u1
 [22 Jul 2022] DSA-5186-1 djangorestframework - security update
-	{CVE-2020-25626}
+	{CVE-2020-25626 CVE-2018-25045}
 	[buster] - djangorestframework 3.9.0-1+deb10u1
 [15 Jul 2022] DSA-5185-1 mat2 - security update
 	{CVE-2022-35410}



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/60002539f2dd5a9e86858c2b1b84a44ec351d429

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/60002539f2dd5a9e86858c2b1b84a44ec351d429
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220723/788cd3a5/attachment.htm>