Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b27a4cd1 by Moritz Muehlenhoff at 2022-07-22T19:17:07+02:00
new dompdf issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -245,7 +245,7 @@ CVE-2022-2476 (A null pointer dereference bug was found in
wavpack-5.4.0 The res
- wavpack <unfixed> (bug #1015790)
[bullseye] - wavpack <no-dsa> (Minor issue)
[buster] - wavpack <no-dsa> (Minor issue)
- NOTE: https://github.com/dbry/WavPack/issues/121
+ NOTE: https://github.com/dbry/WavPack/issues/121
NOTE:
https://github.com/dbry/WavPack/commit/25b4a2725d8568212e7cf89ca05ca29d128af7ac
CVE-2022-2475
RESERVED
@@ -1544,7 +1544,9 @@ CVE-2022-2402
CVE-2022-2401 (Unrestricted information disclosure of all users in Mattermost
version ...)
- mattermost-server <itp> (bug #823556)
CVE-2022-2400 (External Control of File Name or Path in GitHub repository
dompdf/domp ...)
- TODO: check
+ - php-dompdf <unfixed>
+ NOTE: https://huntr.dev/bounties/a6da5e5e-86be-499a-a3c3-2950f749202a
+ NOTE:
https://github.com/dompdf/dompdf/commit/99aeec1efec9213e87098d42eb09439e7ee0bb6a
CVE-2022-2399
RESERVED
CVE-2022-35741 (Apache CloudStack version 4.5.0 and later has a SAML 2.0
authenticatio ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b27a4cd109a4c16e6674b5b7ba9dac036e7d8aad
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b27a4cd109a4c16e6674b5b7ba9dac036e7d8aad
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
