Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ce68065e by security tracker role at 2022-01-23T20:10:22+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,7 @@
+CVE-2022-23850 (xhtml_translate_entity in xhtml.c in epub2txt (aka epub2txt2)
through ...)
+ TODO: check
+CVE-2022-23849
+ RESERVED
CVE-2022-0339
RESERVED
CVE-2022-0338
@@ -916,111 +920,133 @@ CVE-2022-23437
RESERVED
CVE-2022-0311
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2022-0310
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2022-0309
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2022-0308
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2022-0307
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2022-0306
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2022-0305
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2022-0304
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2022-0303
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2022-0302
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2022-0301
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2022-0300
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2022-0298
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2022-0297
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2022-0296
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2022-0295
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2022-0294
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2022-0293
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2022-0292
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2022-0291
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2022-0290
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2022-0289
RESERVED
+ {DSA-5054-1}
- chromium 97.0.4692.99-1
[buster] - chromium <end-of-life> (see DSA 5046)
[stretch] - chromium <end-of-life> (see DSA 4562)
@@ -3169,17 +3195,17 @@ CVE-2022-22819
CVE-2022-22818
RESERVED
CVE-2022-22817 (PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of
arbitra ...)
- {DSA-5053-1}
+ {DSA-5053-1 DLA-2893-1}
- pillow 9.0.0-1
NOTE:
https://pillow.readthedocs.io/en/stable/releasenotes/9.0.0.html#restrict-builtins-available-to-imagemath-eval
NOTE:
https://github.com/python-pillow/Pillow/commit/8531b01d6cdf0b70f256f93092caa2a5d91afc11
(9.0.0)
CVE-2022-22816 (path_getbbox in path.c in Pillow before 9.0.0 has a buffer
over-read d ...)
- {DSA-5053-1}
+ {DSA-5053-1 DLA-2893-1}
- pillow 9.0.0-1
NOTE:
https://pillow.readthedocs.io/en/stable/releasenotes/9.0.0.html#fixed-imagepath-path-array-handling
NOTE:
https://github.com/python-pillow/Pillow/commit/c48271ab354db49cdbd740bc45e13be4f0f7993c
(9.0.0)
CVE-2022-22815 (path_getbbox in path.c in Pillow before 9.0.0 improperly
initializes I ...)
- {DSA-5053-1}
+ {DSA-5053-1 DLA-2893-1}
- pillow 9.0.0-1
NOTE:
https://pillow.readthedocs.io/en/stable/releasenotes/9.0.0.html#fixed-imagepath-path-array-handling
NOTE:
https://github.com/python-pillow/Pillow/commit/1e092419b6806495c683043ab3feb6ce264f3b9c
(9.0.0)
@@ -4939,8 +4965,8 @@ CVE-2021-46026 (mysiteforme, as of 19-12-2022, is
vulnerable to Cross Site Scrip
NOT-FOR-US: mysiteforme
CVE-2021-46025 (A Cross SIte Scripting (XSS) vulnerability exists in OneBlog
<= 2.2 ...)
NOT-FOR-US: OneBlog
-CVE-2021-46024
- RESERVED
+CVE-2021-46024 (Projectworlds online-shopping-webvsite-in-php 1.0 suffers from
a SQL I ...)
+ TODO: check
CVE-2021-46023
RESERVED
CVE-2021-46022 (An Use-After-Free vulnerability in rec_mset_elem_destroy() at
rec-mset ...)
@@ -7295,8 +7321,8 @@ CVE-2021-45382
RESERVED
CVE-2021-45381
RESERVED
-CVE-2021-45380
- RESERVED
+CVE-2021-45380 (AppCMS 2.0.101 has a XSS injection vulnerability in
\templates\m\inc_h ...)
+ TODO: check
CVE-2021-45378
RESERVED
CVE-2021-45377
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ce68065e4fedf4e30a89454147d091db5dd4fc75
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ce68065e4fedf4e30a89454147d091db5dd4fc75
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
