[Git][security-tracker-team/security-tracker][master] 2 commits: Add two new grub2 issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Nov 15 18:05:38 GMT 2022
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
9d53217d by Salvatore Bonaccorso at 2022-11-15T19:04:27+01:00
Add two new grub2 issues
- - - - -
8c44ce2f by Salvatore Bonaccorso at 2022-11-15T19:05:17+01:00
Add grub2 to dsa-needed list
- - - - -
2 changed files:
- data/CVE/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -3854,6 +3854,8 @@ CVE-2022-3776 (The Restaurant Menu – Food Ordering System – Table Re
NOT-FOR-US: WordPress plugin
CVE-2022-3775
RESERVED
+ - grub2 <unfixed>
+ NOTE: https://lists.gnu.org/archive/html/grub-devel/2022-11/msg00059.html
CVE-2022-3774 (A vulnerability was found in SourceCodester Train Scheduler App 1.0 an ...)
NOT-FOR-US: SourceCodester Train Scheduler App
CVE-2022-3773
@@ -24184,6 +24186,8 @@ CVE-2022-37300 (A CWE-640: Weak Password Recovery Mechanism for Forgotten Passwo
NOT-FOR-US: EcoStruxure Control Expert, EcoStruxure Process Expert, and Modicon Controllers M580 and M340
CVE-2022-2601
RESERVED
+ - grub2 <unfixed>
+ NOTE: https://lists.gnu.org/archive/html/grub-devel/2022-11/msg00059.html
CVE-2022-2600 (The Auto-hyperlink URLs WordPress plugin through 5.4.1 does not set re ...)
NOT-FOR-US: WordPress plugin
CVE-2022-2599 (The Anti-Malware Security and Brute-Force Firewall WordPress plugin be ...)
=====================================
data/dsa-needed.txt
=====================================
@@ -20,6 +20,8 @@ frr
--
gerbv
--
+grub2 (carnil)
+--
linux (carnil)
Wait until more issues have piled up, though try to regulary rebase for point
releases to more recent v5.10.y versions
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/77adaae967de1e93a5b5dfda9d67bf617ed12baf...8c44ce2f162092f84fa1094c1157a5e9e4ce6ccb
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/77adaae967de1e93a5b5dfda9d67bf617ed12baf...8c44ce2f162092f84fa1094c1157a5e9e4ce6ccb
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221115/b16e2613/attachment.htm>
More information about the debian-security-tracker-commits
mailing list