[Git][security-tracker-team/security-tracker][master] CVE-2022-24903/rsyslog: reference more introductory patches

Sylvain Beucler (@beuc) beuc at debian.org
Thu May 19 07:56:59 BST 2022



Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7a04b929 by Sylvain Beucler at 2022-05-19T08:56:37+02:00
CVE-2022-24903/rsyslog: reference more introductory patches

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -17691,6 +17691,8 @@ CVE-2022-24903 (Rsyslog is a rocket-fast system for log processing. Modules for
 	NOTE: https://github.com/rsyslog/rsyslog/security/advisories/GHSA-ggw7-xr6h-mmr8#advisory-comment-72243
 	NOTE: https://github.com/rsyslog/rsyslog/commit/89955b0bcb1ff105e1374aad7e0e993faa6a038f (v8.2204.1)
 	NOTE: Introduced partially by: https://github.com/rsyslog/rsyslog/commit/0381a0de64a5a048c3d48b79055bd9848d0c7fc2 (v8.27.0, CVE-2018-16881)
+	NOTE: Introduced partially by: https://github.com/rsyslog/rsyslog/commit/6c52f29d593a27f934a1871d40eed84ebde3f3a6 (v8.27.0)
+	NOTE: contrib/imhttp/ introduced in https://github.com/rsyslog/rsyslog/commit/6102f6083cfa73fe4a91e3d34c4d1dc924465278 (v8.2010.0)
 CVE-2022-24902 (TkVideoplayer is a simple library to play video files in tkinter. Unco ...)
 	NOT-FOR-US: TkVideoplayer
 CVE-2022-24901 (Improper validation of the Apple certificate URL in the Apple Game Cen ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7a04b929cd96794f527ed72203a9a58e266b87b3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7a04b929cd96794f527ed72203a9a58e266b87b3
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220519/7ca79bc8/attachment.htm>


More information about the debian-security-tracker-commits mailing list