Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e756a797 by Salvatore Bonaccorso at 2022-04-22T16:57:50+02:00
Track three new hoteldruid CVEs
- - - - -
f1ca669b by Salvatore Bonaccorso at 2022-04-22T16:58:17+02:00
Track fixed version for CVE-2022-22909/hoteldruid via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -8156,6 +8156,9 @@ CVE-2022-26565 (A cross-site scripting (XSS)
vulnerability in Totaljs commit 95f
NOT-FOR-US: Totaljs CMS
CVE-2022-26564
RESERVED
+ - hoteldruid 3.0.4-1
+ [bullseye] - hoteldruid <no-dsa> (Minor issue)
+ [buster] - hoteldruid <no-dsa> (Minor issue)
CVE-2022-26563
RESERVED
CVE-2022-26562 (An issue in provider/libserver/ECKrbAuth.cpp of Kopano-Core
v11.0.2.51 ...)
@@ -19706,7 +19709,7 @@ CVE-2022-22911
CVE-2022-22910
RESERVED
CVE-2022-22909 (HotelDruid v3.0.3 was discovered to contain a remote code
execution (R ...)
- - hoteldruid <unfixed> (bug #1006750)
+ - hoteldruid 3.0.4-1 (bug #1006750)
[bullseye] - hoteldruid <no-dsa> (Minor issue)
[buster] - hoteldruid <no-dsa> (Minor issue)
[stretch] - hoteldruid <no-dsa> (Minor issue)
@@ -34301,8 +34304,14 @@ CVE-2021-42950 (Remote Code Execution (RCE)
vulnerability exists in Zepl Noteboo
NOT-FOR-US: Zepl
CVE-2021-42949
RESERVED
+ - hoteldruid 3.0.4-1
+ [bullseye] - hoteldruid <no-dsa> (Minor issue)
+ [buster] - hoteldruid <no-dsa> (Minor issue)
CVE-2021-42948
RESERVED
+ - hoteldruid 3.0.4-1
+ [bullseye] - hoteldruid <no-dsa> (Minor issue)
+ [buster] - hoteldruid <no-dsa> (Minor issue)
CVE-2021-42947
RESERVED
CVE-2021-42946 (A Cross Site Scripting (XSS) vulnerability exists in
htmly.2.8.1 via t ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/d1aa83ca3b4edac2e00eeb795d3c8ccc9022c475...f1ca669b1e305d7f7963dea762b7f2d46b5d7ba1
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/d1aa83ca3b4edac2e00eeb795d3c8ccc9022c475...f1ca669b1e305d7f7963dea762b7f2d46b5d7ba1
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
