[Git][security-tracker-team/security-tracker][master] "new" plexus-utils2 issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f339c3ea by Moritz Muehlenhoff at 2023-09-15T10:11:19+02:00
"new" plexus-utils2 issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -51359,10 +51359,16 @@ CVE-2022-43485 (Use of Insufficiently Random Values in Honeywell OneWireless. Th
 	NOT-FOR-US: Honeywell
 CVE-2022-4245
 	RESERVED
+	- plexus-utils2 3.0.24-1
+	NOTE: https://security.snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSPLEXUS-461102
+	NOTE: https://github.com/codehaus-plexus/plexus-utils/commit/f933e5e78dc2637e485447ed821fe14904f110de (plexus-utils-3.0.24)
+	NOTE: https://github.com/codehaus-plexus/plexus-utils/issues/3
 CVE-2022-4244
 	RESERVED
 	- plexus-utils2 3.0.24-1
 	NOTE: https://security.snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSPLEXUS-31521
+	NOTE: https://github.com/codehaus-plexus/plexus-utils/issues/4
+	NOTE: https://github.com/codehaus-plexus/plexus-utils/commit/33a2853df8185b4519b1b8bfae284f03392618ef (plexus-utils-3.0.24)
 CVE-2022-4243 (The ImageInject WordPress plugin through 1.17 does not sanitise and es ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2022-4242 (The WP Google Review Slider WordPress plugin before 11.6 does not sani ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f339c3ea53b01c1cd0dc0421517dfce942707f79

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f339c3ea53b01c1cd0dc0421517dfce942707f79
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230915/75b7f57d/attachment.htm>