Neil Williams pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d494eb2a by Neil Williams at 2022-02-23T14:02:31+00:00
CVE-2022-25299/phantomjs <removed>, stretch not affected
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1235,7 +1235,10 @@ CVE-2022-XXXX [Arbitrary File Write Vulnerability ]
NOTE:
https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-673j-qm5f-xpv8
NOTE:
https://github.com/pgjdbc/pgjdbc/commit/f6d47034a4ce292e1a659fa00963f6f713117064
(REL42.3.3-rc1)
CVE-2022-25299 (This affects the package cesanta/mongoose before 7.6. The
unsafe handl ...)
- TODO: check
+ - phantomjs <removed>
+ [stretch] - phantomjs <not-affected> (Vulnerable code introduced later)
+ NOTE:
https://github.com/cesanta/mongoose/commit/c65c8fdaaa257e0487ab0aaae9e8f6b439335945
+ NOTE: https://snyk.io/vuln/SNYK-UNMANAGED-CESANTAMONGOOSE-2404180
CVE-2022-25298 (This affects the package sprinfall/webcc before 0.3.0. It is
possible ...)
NOT-FOR-US: webcc
CVE-2022-25297 (This affects the package drogonframework/drogon before 1.7.5.
The unsa ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d494eb2a8e8e87324ae6707a65b954456062a1ba
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d494eb2a8e8e87324ae6707a65b954456062a1ba
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
