Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b135543f by Salvatore Bonaccorso at 2022-01-11T06:55:10+01:00
Add CVE-2021-4453{1,2,3,4}/nodejs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -7299,14 +7299,26 @@ CVE-2021-44536
RESERVED
CVE-2021-44535
RESERVED
-CVE-2021-44534
+CVE-2021-44534 [Prototype pollution via console.table properties]
RESERVED
-CVE-2021-44533
+ - nodejs <unfixed>
+ NOTE:
https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/#prototype-pollution-via-console-table-properties-low-cve-2022-21824
+ TODO: check details
+CVE-2021-44533 [Incorrect handling of certificate subject and issuer fields]
RESERVED
-CVE-2021-44532
+ - nodejs <unfixed>
+ NOTE:
https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/#incorrect-handling-of-certificate-subject-and-issuer-fields-medium-cve-2021-44533
+ TODO: check details
+CVE-2021-44532 [Certificate Verification Bypass via String Injection]
RESERVED
-CVE-2021-44531
+ - nodejs <unfixed>
+ NOTE:
https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/#certificate-verification-bypass-via-string-injection-medium-cve-2021-44532
+ TODO: check details
+CVE-2021-44531 [Improper handling of URI Subject Alternative Names]
RESERVED
+ - nodejs <unfixed>
+ NOTE:
https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/#improper-handling-of-uri-subject-alternative-names-medium-cve-2021-44531
+ TODO: check details
CVE-2021-44530
RESERVED
CVE-2021-44529 (A code injection vulnerability in the Ivanti EPM Cloud
Services Applia ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b135543fbdaa77b095c17b57a693bb76fcec8e98
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b135543fbdaa77b095c17b57a693bb76fcec8e98
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
