Neil Williams pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
193d5ad6 by Neil Williams at 2022-05-09T13:22:41+01:00
golang-github-endophage-gotuf removed & two NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3639,9 +3639,13 @@ CVE-2022-29175 (Vyper is a pythonic smart contract
language for the ethereum vir
CVE-2022-29174
RESERVED
CVE-2022-29173 (go-tuf is a Go implementation of The Update Framework (TUF).
go-tuf do ...)
- TODO: check
+ - golang-github-endophage-gotuf <removed>
+ [stretch] - golang-github-endophage-gotuf <not-affected> (Vulnerable
code not present)
+ NOTE: upstream location has changed since the version in stretch.
+ NOTE:
https://github.com/theupdateframework/go-tuf/commit/ed6788e710fc3093a7ecc2d078bf734c0f200d8d
+ NOTE:
https://github.com/theupdateframework/go-tuf/security/advisories/GHSA-66x3-6cw3-v5gj
CVE-2022-29172 (Auth0 is an authentication broker that supports both social
and enterp ...)
- TODO: check
+ NOT-FOR-US: Auth0
CVE-2022-29171 (Sourcegraph is a fast and featureful code search and
navigation engine ...)
NOT-FOR-US: Sourcegraph
CVE-2022-29170
@@ -3653,7 +3657,7 @@ CVE-2022-29168
CVE-2022-29167 (Hawk is an HTTP authentication scheme providing mechanisms for
making ...)
NOT-FOR-US: Hawk (mozilla/hawk, different from itp'ed hawk, #634344)
CVE-2022-29166 (matrix-appservice-irc is a Node.js IRC bridge for Matrix. The
vulnerab ...)
- TODO: check
+ NOT-FOR-US: Matrix-appservice-bridge
CVE-2022-29165
RESERVED
CVE-2022-29164 (Argo Workflows is an open source container-native workflow
engine for ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/193d5ad681ba5fe580d609f4b9be98fdbaaf9aa1
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/193d5ad681ba5fe580d609f4b9be98fdbaaf9aa1
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
