Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
14286e72 by Salvatore Bonaccorso at 2021-12-16T21:24:11+01:00
Add CVE-2021-4124/janus
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -112,7 +112,10 @@ CVE-2021-XXXX [JNDI vunerability]
CVE-2021-44771
RESERVED
CVE-2021-4124 (janus-gateway is vulnerable to Improper Neutralization of Input
During ...)
- TODO: check
+ - janus <unfixed> (unimportant)
+ NOTE: https://huntr.dev/bounties/a6ca142e-60aa-4d6f-b231-5d1bcd1b7190
+ NOTE:
https://github.com/meetecho/janus-gateway/commit/f62bba6513ec840761f2434b93168106c7c65a3d
+ NOTE: Issues only in janus-demos built from src:janus
CVE-2021-4123 (livehelperchat is vulnerable to Cross-Site Request Forgery
(CSRF) ...)
TODO: check
CVE-2021-4122
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/14286e721bff19d737f65106d888b07a0e23ec6c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/14286e721bff19d737f65106d888b07a0e23ec6c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
