[Git][security-tracker-team/security-tracker][master] CVE-2021-37219: Add upstream commit reference.

[Abhijith PA (@abhijith)]

Abhijith PA pushed to branch master at Debian Security Tracker / security-tracker


Commits:
acfb6606 by Abhijith PA at 2023-04-30T18:41:40+05:30
CVE-2021-37219: Add upstream commit reference.
CVE-2020-7955: Mark as not-affected, func AgentHealthServiceByID
 introduced later.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -135558,6 +135558,7 @@ CVE-2021-37220 (MuPDF through 1.18.1 has an out-of-bounds write because the cach
 CVE-2021-37219 (HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows no ...)
 	- consul 1.8.7+dfsg1-6 (bug #1015218)
 	NOTE: https://discuss.hashicorp.com/t/hcsec-2021-22-consul-raft-rpc-privilege-escalation/29024
+	NOTE: https://github.com/hashicorp/consul/commit/ccf8eb1947357434eb6e66303ddab79f4c9d4103
 CVE-2021-37218 (HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server  ...)
 	- nomad <unfixed> (bug #1021273)
 	[bullseye] - nomad <no-dsa> (Minor issue)
@@ -240868,7 +240869,7 @@ CVE-2020-7956 (HashiCorp Nomad and Nomad Enterprise up to 0.10.2 incorrectly val
 	NOTE: https://github.com/hashicorp/nomad/issues/7003
 CVE-2020-7955 (HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uni ...)
 	- consul 1.7.0+dfsg1-1 (bug #950736)
-	[buster] - consul <no-dsa> (Minor issue)
+	[buster] - consul <not-affected> (Vulnerable code not present)
 	NOTE: https://github.com/hashicorp/consul/issues/7160
 	NOTE: Fixed in 1.6.3.
 CVE-2020-7954 (An issue was discovered in OpServices OpMon 9.3.2. Starting from the a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/acfb6606d28dff10d7de228f0e9951c219bc4b37

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/acfb6606d28dff10d7de228f0e9951c219bc4b37
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230430/25b8a80c/attachment-0001.htm>