[Git][security-tracker-team/security-tracker][master] pcs, chromium DSAs
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Tue Sep 6 21:17:48 BST 2022
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
a655ad42 by Moritz Mühlenhoff at 2022-09-06T22:17:14+02:00
pcs, chromium DSAs
- - - - -
3 changed files:
- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -34057,7 +34057,6 @@ CVE-2022-1050 (A flaw was found in the QEMU implementation of VMWare's paravirtu
NOTE: https://lists.nongnu.org/archive/html/qemu-devel/2022-03/msg05197.html
CVE-2022-1049 (A flaw was found in the Pacemaker configuration tool (pcs). The pcs da ...)
- pcs 0.11.3-1
- [bullseye] - pcs <no-dsa> (Minor issue)
[buster] - pcs <no-dsa> (Minor issue)
[stretch] - pcs <not-affected> (Vulnerable code introduced later, ./pcs/daemon/ not present)
NOTE: https://huntr.dev/bounties/7aa921fc-a568-4fd8-96f4-7cd826246aa5
=====================================
data/DSA/list
=====================================
@@ -1,3 +1,9 @@
+[06 Sep 2022] DSA-5226-1 pcs - security update
+ {CVE-2022-1049 CVE-2022-2735}
+ [bullseye] - pcs 0.10.8-1+deb11u1
+[06 Sep 2022] DSA-5225-1 chromium - security update
+ {CVE-2022-3075}
+ [bullseye] - chromium 105.0.5195.102-1~deb11u1
[06 Sep 2022] DSA-5224-1 poppler - security update
{CVE-2022-27337 CVE-2022-38784}
[bullseye] - poppler 20.09.0-3.1+deb11u1
=====================================
data/dsa-needed.txt
=====================================
@@ -14,8 +14,6 @@ If needed, specify the release by adding a slash after the name of the source pa
--
asterisk (apo)
--
-chromium
---
connman (carnil)
--
freecad (aron)
@@ -33,8 +31,6 @@ netatalk
--
nodejs
--
-pcs (jmm)
---
php-horde-mime-viewer
--
php-horde-turba
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a655ad42fe4066ffb52b38084929ef3946a2bf18
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a655ad42fe4066ffb52b38084929ef3946a2bf18
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220906/e12e6850/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list