Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3e741c2e by Salvatore Bonaccorso at 2022-01-02T14:19:05+01:00
Update information for CVE-2021-3271{8,9}/rabbitmq-server
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -36949,19 +36949,24 @@ CVE-2021-32721 (PowerMux is a drop-in replacement for
Go's http.ServeMux. In Pow
CVE-2021-32720 (Sylius is an Open Source eCommerce platform on top of Symfony.
In vers ...)
NOT-FOR-US: Sylius
CVE-2021-32719 (RabbitMQ is a multi-protocol messaging broker. In
rabbitmq-server prio ...)
- - rabbitmq-server <unfixed> (bug #990524)
+ - rabbitmq-server 3.9.4-1 (bug #990524)
[bullseye] - rabbitmq-server <no-dsa> (Minor issue)
[buster] - rabbitmq-server <no-dsa> (Minor issue)
[stretch] - rabbitmq-server <not-affected> (Vulnerable code not present)
NOTE:
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-5452-hxj4-773x
NOTE: https://github.com/rabbitmq/rabbitmq-server/pull/3122
+ NOTE: Fixed by:
https://github.com/rabbitmq/rabbitmq-server/commit/f01f0f2d840b98128cdb7ff966d8234b06ef7c75
(master)
+ NOTE: Fixed by:
https://github.com/rabbitmq/rabbitmq-server/commit/51df93b45fb05f935456f09b88e7554e0b36317f
(v3.9.0-beta.1)
+ NOTE: Fixed by:
https://github.com/rabbitmq/rabbitmq-server/commit/08beb82e9ab8923ded88ece2800cd80971e2bd05
(v3.8.18)
CVE-2021-32718 (RabbitMQ is a multi-protocol messaging broker. In
rabbitmq-server prio ...)
- - rabbitmq-server <unfixed> (bug #990524)
+ - rabbitmq-server 3.9.4-1 (bug #990524)
[bullseye] - rabbitmq-server <no-dsa> (Minor issue)
[buster] - rabbitmq-server <no-dsa> (Minor issue)
[stretch] - rabbitmq-server <not-affected> (Vulnerable code not present)
NOTE:
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-c3hj-rg5h-2772
NOTE: https://github.com/rabbitmq/rabbitmq-server/pull/3028
+ NOTE: Fixed by:
https://github.com/rabbitmq/rabbitmq-server/commit/a8dffdf7de9793a76fc4685c89b968d8eddca4ca
(v3.9.0-beta.1)
+ NOTE: Fixed by:
https://github.com/rabbitmq/rabbitmq-server/commit/a7373585faeac0aaede5a9c245094d8022e81299
(v3.8.17-rc.1)
CVE-2021-32717 (Shopware is an open source eCommerce platform. In versions
prior to 6. ...)
NOT-FOR-US: Shopware
CVE-2021-32716 (Shopware is an open source eCommerce platform. In versions
prior to 6. ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3e741c2e44095af83f5722f61a7c42cb98a851f7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3e741c2e44095af83f5722f61a7c42cb98a851f7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
