[Git][security-tracker-team/security-tracker][master] CVE-2022-23901/re2c 3.0-1

[Neil Williams (@codehelp)]

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7e48a4cb by Neil Williams at 2022-03-30T14:59:56+01:00
CVE-2022-23901/re2c 3.0-1

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -12180,7 +12180,10 @@ CVE-2022-23903 (A Cross Site Scripting (XSS) vulnerability exists in pearadmin p
 CVE-2022-23902 (Tongda2000 v11.10 was discovered to contain a SQL injection vulnerabil ...)
 	NOT-FOR-US: Tongda2000
 CVE-2022-23901 (A stack overflow re2c 2.2 exists due to infinite recursion issues in s ...)
-	TODO: check
+	- re2c 3.0-1
+	NOTE: https://github.com/skvadrik/re2c/issues/394
+	NOTE: https://github.com/skvadrik/re2c/commit/a3473fd7be829cb33907cb08612f955133c70a96 (3.0)
+	NOTE: https://github.com/skvadrik/re2c/commit/039c18949190c5de5397eba504d2c75dad2ea9ca (3.0)
 CVE-2022-23900
 	RESERVED
 CVE-2022-23899 (MCMS v5.2.5 was discovered to contain a SQL injection vulnerability vi ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7e48a4cb5f0bb4fb2bcac6e16a49a07902bdfa64

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7e48a4cb5f0bb4fb2bcac6e16a49a07902bdfa64
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220330/31329ec5/attachment.htm>