[Git][security-tracker-team/security-tracker][master] buster/bullseye triage

Moritz Muehlenhoff (@jmm) jmm at debian.org
Fri Jul 29 23:14:38 BST 2022



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a139145a by Moritz Muehlenhoff at 2022-07-30T00:13:58+02:00
buster/bullseye triage

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -15058,6 +15058,8 @@ CVE-2022-31161 (Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepa
 	NOT-FOR-US: Roxy-WI
 CVE-2022-31160 (jQuery UI is a curated set of user interface interactions, effects, wi ...)
 	- jqueryui 1.13.2+dfsg-1 (bug #1015982)
+	[bullseye] - jqueryui <no-dsa> (Minor issue)
+	[buster] - jqueryui <no-dsa> (Minor issue)
 	NOTE: https://github.com/jquery/jquery-ui/security/advisories/GHSA-h6gj-6jjq-h8g9
 	NOTE: https://github.com/jquery/jquery-ui/commit/8cc5bae1caa1fcf96bf5862c5646c787020ba3f9
 CVE-2022-31159 (The AWS SDK for Java enables Java developers to work with Amazon Web S ...)
@@ -31087,6 +31089,8 @@ CVE-2022-21209 (The affected product is vulnerable to an out-of-bounds read whil
 CVE-2022-0730 (Under certain ldap conditions, Cacti authentication can be bypassed wi ...)
 	{DLA-2965-1}
 	- cacti 1.2.20+ds1-1 (bug #1008693)
+	[bullseye] - cacti <no-dsa> (Minor issue)
+	[buster] - cacti <no-dsa> (Minor issue)
 	NOTE: https://github.com/Cacti/cacti/issues/4562
 	NOTE: https://github.com/Cacti/cacti/commit/1386bdbf7f845a32e24ac9415f3ebb7932e77fe7 (1.2.x)
 	NOTE: https://github.com/Cacti/cacti/commit/8694bf28edad723585915a97b95fbf5b1816a02b (1.2.x)


=====================================
data/dsa-needed.txt
=====================================
@@ -30,6 +30,8 @@ kopanocore/oldstable
 --
 librecad
 --
+libtirpc
+--
 libpgjava (apo)
   NOTE: 20220711: libscram-java is missing in bullseye-security. I am currently
   NOTE: 20220711: waiting for #1014409 being resolved.



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a139145aba34b85245fb20b1000f3ce8f98dfea1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a139145aba34b85245fb20b1000f3ce8f98dfea1
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220729/eb6ebde5/attachment.htm>


More information about the debian-security-tracker-commits mailing list