Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d271ac1a by Salvatore Bonaccorso at 2022-04-25T19:08:56+02:00
Re-associate CVE-2021-35043 with libowasp-antisamy-java
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -55578,7 +55578,8 @@ CVE-2021-35045 (Cross site scripting (XSS)
vulnerability in Ice Hrm 29.0.0.OS, a
CVE-2021-35044
RESERVED
CVE-2021-35043 (OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes
when using ...)
- NOT-FOR-US: OWASP AntiSamy
+ - libowasp-antisamy-java <unfixed>
+ NOTE: https://github.com/nahsra/antisamy/pull/87
CVE-2021-35042 (Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows
QuerySet.orde ...)
- python-django <not-affected> (Vulnerable code introduced in 3.1)
NOTE:
https://www.djangoproject.com/weblog/2021/jul/01/security-releases/
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d271ac1af4370d6e7e70d41a666b6d3522cb0c58
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d271ac1af4370d6e7e70d41a666b6d3522cb0c58
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
