[Git][security-tracker-team/security-tracker][master] Add new airflow CVEs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Nov 22 08:43:34 GMT 2022



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
169b987b by Salvatore Bonaccorso at 2022-11-22T09:43:06+01:00
Add new airflow CVEs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -15173,6 +15173,7 @@ CVE-2016-20015 (In the ebuild package through smokeping-2.7.3-r1 for SmokePing o
 	NOT-FOR-US: ebuild package for SmokePing on Gentoo
 CVE-2022-41131
 	RESERVED
+	- airflow <itp> (bug #819700)
 CVE-2022-41130
 	RESERVED
 CVE-2022-41129
@@ -15543,6 +15544,7 @@ CVE-2022-40955 (In versions of Apache InLong prior to 1.3.0, an attacker with su
 	NOT-FOR-US: Apache InLong
 CVE-2022-40954
 	RESERVED
+	- airflow <itp> (bug #819700)
 CVE-2022-40701
 	RESERVED
 CVE-2022-40220
@@ -17322,6 +17324,7 @@ CVE-2022-40191 (Authenticated (subscriber+) Stored Cross-Site Scripting (XSS) vu
 	NOT-FOR-US: WordPress plugin
 CVE-2022-40189
 	RESERVED
+	- airflow <itp> (bug #819700)
 CVE-2022-40132 (Cross-Site Request Forgery (CSRF) vulnerability in Seriously Simple Po ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2022-38976
@@ -21428,6 +21431,7 @@ CVE-2022-38650 (** UNSUPPORTED WHEN ASSIGNED ** A remote unauthenticated insecur
 	NOT-FOR-US: VMware
 CVE-2022-38649
 	RESERVED
+	- airflow <itp> (bug #819700)
 CVE-2022-38648 (Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XM ...)
 	- batik 1.15+dfsg-1 (bug #1020589)
 	[bullseye] - batik <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/169b987b35fe3923e45fcdedd1a7a7b1c63bb32e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/169b987b35fe3923e45fcdedd1a7a7b1c63bb32e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221122/ce1ccae0/attachment.htm>


More information about the debian-security-tracker-commits mailing list