[Git][security-tracker-team/security-tracker][master] Add CVE-2022-29250/glpi

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sun Jun 12 08:18:16 BST 2022



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
627d0c3f by Salvatore Bonaccorso at 2022-06-12T09:17:47+02:00
Add CVE-2022-29250/glpi

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -10389,7 +10389,9 @@ CVE-2022-29252 (XWiki Platform Wiki UI Main Wiki is a package for managing subwi
 CVE-2022-29251 (XWiki Platform Flamingo Theme UI is a tool that allows customization a ...)
 	NOT-FOR-US: XWiki
 CVE-2022-29250 (GLPI is a Free Asset and IT Management Software package, that provides ...)
-	TODO: check
+	- glpi <removed> (unimportant)
+	NOTE: https://github.com/glpi-project/glpi/security/advisories/GHSA-5w33-4wrx-8hvw
+	NOTE: Only supported behind an authenticated HTTP zone
 CVE-2022-29249 (JavaEZ is a library that adds new functions to make Java easier. A wea ...)
 	NOT-FOR-US: JavaEZLib/JavaEZ
 CVE-2022-29248 (Guzzle is a PHP HTTP client. Guzzle prior to versions 6.5.6 and 7.4.3  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/627d0c3f095bd8a7db58545b2960e996f80fc8f9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/627d0c3f095bd8a7db58545b2960e996f80fc8f9
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220612/3e259526/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list