[Git][security-tracker-team/security-tracker][master] new gitlab issues

Moritz Muehlenhoff (@jmm) jmm at debian.org
Fri Jul 29 16:01:16 BST 2022



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
520a9911 by Moritz Muehlenhoff at 2022-07-29T17:00:55+02:00
new gitlab issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -581,6 +581,7 @@ CVE-2022-2540
 	RESERVED
 CVE-2022-2539
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-2538
 	RESERVED
 CVE-2022-XXXX [spip: security issues from 4.1.5 release]
@@ -1252,12 +1253,14 @@ CVE-2022-2535
 	RESERVED
 CVE-2022-2534
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-2533
 	RESERVED
 CVE-2022-2532
 	RESERVED
 CVE-2022-2531
 	RESERVED
+	- gitlab <not-affected> (Specific to EE)
 CVE-2022-2530
 	RESERVED
 CVE-2022-2529
@@ -1464,6 +1467,7 @@ CVE-2022-2513
 	RESERVED
 CVE-2022-2512
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-2511 (Cross-site Scripting (XSS) vulnerability in the "commonuserinterface"  ...)
 	NOT-FOR-US: BlueSpice
 CVE-2022-2510 (Cross-site Scripting (XSS) vulnerability in "Extension:ExtendedSearch" ...)
@@ -1548,14 +1552,19 @@ CVE-2022-29493
 	RESERVED
 CVE-2022-2501
 	RESERVED
+	- gitlab <not-affected> (Specific to EE)
 CVE-2022-2500
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-2499
 	RESERVED
+	- gitlab <not-affected> (Specific to EE)
 CVE-2022-2498
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-2497
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-2496
 	RESERVED
 CVE-2020-36558 (A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX ...)
@@ -1822,12 +1831,14 @@ CVE-2022-2460
 	RESERVED
 CVE-2022-2459
 	RESERVED
+	- gitlab <not-affected> (Specific to EE)
 CVE-2022-2458
 	RESERVED
 CVE-2022-2457
 	RESERVED
 CVE-2022-2456
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-36275
 	RESERVED
 CVE-2022-36274
@@ -2732,6 +2743,7 @@ CVE-2022-2418 (A vulnerability was found in URVE Web Manager. It has been classi
 	NOT-FOR-US: URVE Web Manager
 CVE-2022-2417
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-2416
 	RESERVED
 CVE-2022-2415 (Heap buffer overflow in WebGL in Google Chrome prior to 103.0.5060.53  ...)
@@ -4226,6 +4238,7 @@ CVE-2022-2327 (io_uring use work_flags to determine which identity need to grab
 	- linux <unfixed>
 CVE-2022-2326
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-35234
 	RESERVED
 CVE-2022-35233
@@ -4924,6 +4937,7 @@ CVE-2022-34918 (An issue was discovered in the Linux kernel through 5.18.9. A ty
 	NOTE: https://www.randorisec.fr/crack-linux-firewall/
 CVE-2022-2307
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-34917
 	RESERVED
 CVE-2022-34916
@@ -4940,6 +4954,7 @@ CVE-2022-2304 (Stack-based Buffer Overflow in GitHub repository vim/vim prior to
 	NOTE: https://github.com/vim/vim/commit/54e5fed6d27b747ff152cdb6edfb72ff60e70939 (v9.0.0035)
 CVE-2022-2303
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-2302 (Multiple Lenze products of the cabinet series skip the password verifi ...)
 	NOT-FOR-US: Lenze
 CVE-2022-2301 (Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3. ...)
@@ -8273,6 +8288,7 @@ CVE-2022-2096
 	RESERVED
 CVE-2022-2095
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-2094
 	RESERVED
 CVE-2022-2093 (The WP Duplicate Page WordPress plugin before 1.3 does not sanitize an ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/520a99115ca504694a64f298e3421f40b6722e6f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/520a99115ca504694a64f298e3421f40b6722e6f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220729/853c8ee2/attachment.htm>


More information about the debian-security-tracker-commits mailing list