[Git][security-tracker-team/security-tracker][master] Build cross-references for issues covered in DSA-5279-1

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Feb 16 20:07:25 GMT 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6143935f by Salvatore Bonaccorso at 2023-02-16T21:06:45+01:00
Build cross-references for issues covered in DSA-5279-1

- - - - -


2 changed files:

- data/CVE/list
- data/DSA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -27741,17 +27741,14 @@ CVE-2022-43508 (Use-after free vulnerability exists in CX-Programmer v.9.77 and
 	NOT-FOR-US: CX-Programmer
 CVE-2022-43504 (Improper authentication vulnerability in WordPress versions prior to 6 ...)
 	- wordpress 6.0.3+dfsg1-1 (bug #1022575)
-	[bullseye] - wordpress 5.7.8+dfsg1-0+deb11u1
 	[buster] - wordpress <postponed> (wait for CVE assignment)
 	NOTE: https://wordpress.org/news/2022/10/wordpress-6-0-3-security-release/
 CVE-2022-43500 (Cross-site scripting vulnerability in WordPress versions prior to 6.0. ...)
 	- wordpress 6.0.3+dfsg1-1 (bug #1022575)
-	[bullseye] - wordpress 5.7.8+dfsg1-0+deb11u1
 	[buster] - wordpress <postponed> (wait for CVE assignment)
 	NOTE: https://wordpress.org/news/2022/10/wordpress-6-0-3-security-release/
 CVE-2022-43497 (Cross-site scripting vulnerability in WordPress versions prior to 6.0. ...)
 	- wordpress 6.0.3+dfsg1-1 (bug #1022575)
-	[bullseye] - wordpress 5.7.8+dfsg1-0+deb11u1
 	[buster] - wordpress <postponed> (wait for CVE assignment)
 	NOTE: https://wordpress.org/news/2022/10/wordpress-6-0-3-security-release/
 CVE-2022-43487 (Cross-site scripting vulnerability in Salon booking system versions pr ...)


=====================================
data/DSA/list
=====================================
@@ -213,6 +213,7 @@
 	{CVE-2022-2601 CVE-2022-3775}
 	[bullseye] - grub2 2.06-3~deb11u4
 [15 Nov 2022] DSA-5279-1 wordpress - security update
+	{CVE-2022-43497 CVE-2022-43500 CVE-2022-43504}
 	[bullseye] - wordpress 5.7.8+dfsg1-0+deb11u1
 [13 Nov 2022] DSA-5278-1 xorg-server - security update
 	{CVE-2022-3550 CVE-2022-3551}



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6143935fea705c5acc55ebf628ad9c3be7da8026

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6143935fea705c5acc55ebf628ad9c3be7da8026
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230216/ef267ede/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list