Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
294c2db7 by Salvatore Bonaccorso at 2022-04-11T22:14:08+02:00
Add Debian bug reference for CVE-2022-26635/php-memcached
- - - - -
3c08e278 by Salvatore Bonaccorso at 2022-04-11T22:14:09+02:00
Add Debian bug reference for CVE-2022-24785/node-moment
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6459,7 +6459,7 @@ CVE-2022-26637
CVE-2022-26636
RESERVED
CVE-2022-26635 (PHP-Memcached v2.2.0 and below contains an improper NULL
termination w ...)
- - php-memcached <unfixed>
+ - php-memcached <unfixed> (bug #1009328)
[stretch] - php-memcached <no-dsa> (Minor issue)
NOTE: https://xhzeem.me/posts/Php5-memcached-Injection-Bypass/read/
CVE-2022-26634
@@ -11498,7 +11498,7 @@ CVE-2022-24787 (Vyper is a Pythonic Smart Contract
Language for the Ethereum Vir
CVE-2022-24786 (PJSIP is a free and open source multimedia communication
library writt ...)
TODO: check
CVE-2022-24785 (Moment.js is a JavaScript date library for parsing,
validating, manipu ...)
- - node-moment <unfixed>
+ - node-moment <unfixed> (bug #1009327)
NOTE:
https://github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4
NOTE:
https://github.com/moment/moment/commit/4211bfc8f15746be4019bba557e29a7ba83d54c5
(2.29.2)
CVE-2022-24784 (Statamic is a Laravel and Git powered CMS. Before versions
3.2.39 and ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/8a5beb0fd6aadbd3c194e1d992b64055466f3628...3c08e278bb666498a42671857e428f2dbe724183
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/8a5beb0fd6aadbd3c194e1d992b64055466f3628...3c08e278bb666498a42671857e428f2dbe724183
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
