Neil Williams pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6e5bbb5e by Neil Williams at 2022-04-25T13:44:45+01:00
Update libowasp-antisamy-java with bug number
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3579,11 +3579,12 @@ CVE-2022-28368 (Dompdf 1.2.1 allows remote code
execution via a .php file in the
NOTE: https://github.com/dompdf/dompdf/pull/2808
NOTE:
https://github.com/dompdf/dompdf/commit/4c70e1025bcd9b7694b95dd552499bd83cd6141d
(v1.2.1)
CVE-2022-28367 (OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling
on STYLE ...)
- - libowasp-antisamy-java <unfixed>
+ - libowasp-antisamy-java <unfixed> (bug #1010154)
NOTE:
https://github.com/nahsra/antisamy/commit/0199e7e194dba5e7d7197703f43ebe22401e61ae
CVE-2022-28366 (Certain Neko-related HTML parsers allow a denial of service
via crafte ...)
- - libowasp-antisamy-java <unfixed>
+ - libowasp-antisamy-java <unfixed> (bug #1010154)
NOTE: https://github.com/nahsra/antisamy/releases/tag/v1.6.6
+ NOTE: https://github.com/nahsra/antisamy/issues/174
TODO: check upstream for commits
CVE-2022-28365 (Reprise License Manager 14.2 is affected by an Information
Disclosure ...)
NOT-FOR-US: Reprise License Manager
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e5bbb5ec3e4549334a2291f276b1cbec85ede8c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e5bbb5ec3e4549334a2291f276b1cbec85ede8c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
