Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6c2440e3 by Salvatore Bonaccorso at 2020-05-26T19:41:50+02:00
Mark jquery as removed, got replaced with src:node-jquery
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6933,12 +6933,12 @@ CVE-2020-11025 (In affected versions of WordPress, a
cross-site scripting (XSS)
CVE-2020-11024 (In Moonlight iOS/tvOS before 4.0.1, the pairing process is
vulnerable ...)
NOT-FOR-US: Moonlight iOS/tvOS
CVE-2020-11023 (In jQuery versions greater than or equal to 1.0.3 and before
3.5.0, pa ...)
- - jquery <unfixed>
+ - jquery <removed>
[jessie] - jquery <not-affected> (Vulnerable code note present)
- node-jquery 3.5.0+dfsg-2
NOTE:
https://github.com/jquery/jquery/security/advisories/GHSA-jpcq-cgw6-v4j6
CVE-2020-11022 (In jQuery versions greater than or equal to 1.2 and before
3.5.0, pass ...)
- - jquery <unfixed>
+ - jquery <removed>
[jessie] - jquery <not-affected> (Vulnerable code note present)
- node-jquery 3.5.0+dfsg-2
NOTE:
https://github.com/jquery/jquery/security/advisories/GHSA-gxr4-xjj5-5px2
@@ -383774,7 +383774,7 @@ CVE-2007-2381 (The MochiKit framework exchanges data
using JavaScript Object Not
CVE-2007-2380 (The Microsoft Atlas framework exchanges data using JavaScript
Object N ...)
NOT-FOR-US: Microsoft Atlas
CVE-2007-2379 (The jQuery framework exchanges data using JavaScript Object
Notation ( ...)
- - jquery <unfixed> (unimportant)
+ - jquery <removed> (unimportant)
NOTE: the paper in this reference is a guideline on how to avoid
writing unsafe jquery applications. there really isn't anything to fix in the
library itself.
NOTE:
https://www.fortify.com/vulncat/en/vulncat/javascript/javascript_hijacking_ad_hoc_ajax.html
CVE-2007-2378 (The Google Web Toolkit (GWT) framework exchanges data using
JavaScript ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6c2440e30399b7dd9299fe8fec5a6bba62db097b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6c2440e30399b7dd9299fe8fec5a6bba62db097b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
