Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fd7727ff by Salvatore Bonaccorso at 2021-08-23T21:46:05+02:00
Mark ckeditor issues as no-dsa (for buster and bullseye)
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4280,6 +4280,8 @@ CVE-2021-37696 (tmerc-cogs are a collection of open
source plugins for the Red D
NOT-FOR-US: tmerc-cogs
CVE-2021-37695 (ckeditor is an open source WYSIWYG HTML editor with rich
content suppo ...)
- ckeditor 4.16.2+dfsg-1 (bug #992290)
+ [bullseye] - ckeditor <no-dsa> (Minor issue)
+ [buster] - ckeditor <no-dsa> (Minor issue)
NOTE:
https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-m94c-37g6-cjhc
NOTE:
https://github.com/ckeditor/ckeditor4/commit/de3c001540715f9c3801aaa38a1917de46cfcf58
CVE-2021-37694 (@asyncapi/java-spring-cloud-stream-template generates a Spring
Cloud S ...)
@@ -15487,11 +15489,14 @@ CVE-2021-32810 (crossbeam-deque is a package of
work-stealing deques for buildin
TODO: check
CVE-2021-32809 (ckeditor is an open source WYSIWYG HTML editor with rich
content suppo ...)
- ckeditor 4.16.2+dfsg-1 (bug #992291)
+ [bullseye] - ckeditor <no-dsa> (Minor issue)
+ [buster] - ckeditor <no-dsa> (Minor issue)
NOTE:
https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-7889-rm5j-hpgg
NOTE:
https://github.com/ckeditor/ckeditor4/commit/f6856decd5992b2b07945292416bb113d5f7ff82
(v4.16.2)
NOTE: Introduced by
https://github.com/ckeditor/ckeditor4/commit/ca0851c7a14f616a0c4cda905816aa87ca399efb
(v4.5.2)
CVE-2021-32808 (ckeditor is an open source WYSIWYG HTML editor with rich
content suppo ...)
- ckeditor 4.16.2+dfsg-1 (bug #992292)
+ [bullseye] - ckeditor <no-dsa> (Minor issue)
[buster] - ckeditor <not-affected> (Vulnerable code introduced later)
[stretch] - ckeditor <not-affected> (Vulnerable code introduced later)
NOTE:
https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-6226-h7ff-ch6c
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fd7727fff9e5e18023c00b4e8c12fd3d95150c18
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fd7727fff9e5e18023c00b4e8c12fd3d95150c18
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
