Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ec0f4e96 by Salvatore Bonaccorso at 2022-02-08T07:28:24+01:00
CVE-2021-43859/libxstream-java
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -15547,7 +15547,10 @@ CVE-2021-43860 (Flatpak is a Linux application
sandboxing and distribution frame
NOTE:
https://github.com/flatpak/flatpak/commit/93357d357119093804df05acc32ff335839c6451
NOTE:
https://github.com/flatpak/flatpak/commit/65cbfac982cb1c83993a9e19aa424daee8e9f042
CVE-2021-43859 (XStream is an open source java library to serialize objects to
XML and ...)
- TODO: check
+ - libxstream-java <unfixed>
+ NOTE:
https://github.com/x-stream/xstream/security/advisories/GHSA-rmr5-cpv2-vgjf
+ NOTE: https://x-stream.github.io/CVE-2021-43859.html
+ NOTE:
https://github.com/x-stream/xstream/commit/e8e88621ba1c85ac3b8620337dd672e0c0c3a846
CVE-2021-43858 (MinIO is a Kubernetes native application for cloud storage.
Prior to v ...)
NOT-FOR-US: MinIO
CVE-2021-43857 (Gerapy is a distributed crawler management framework. Gerapy
prior to ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ec0f4e963508067c4a4584a1baf2fb6ce6be30f0
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ec0f4e963508067c4a4584a1baf2fb6ce6be30f0
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
