Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
304f8022 by security tracker role at 2022-11-05T20:10:21+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -14095,12 +14095,12 @@ CVE-2022-40305 (A Server-Side Request Forgery issue
in Canto Cumulus through 11.
NOT-FOR-US: Canto Cumulus
CVE-2022-40304 [dict corruption caused by entity reference cycles]
RESERVED
- {DLA-3172-1}
+ {DSA-5271-1 DLA-3172-1}
- libxml2 2.9.14+dfsg-1.1 (bug #1022225)
NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/libxml2/-/commit/1b41ec4e9433b05bb0376be4725804c54ef1d80b
(v2.10.3)
CVE-2022-40303 [integer overflows with XML_PARSE_HUGE]
RESERVED
- {DLA-3172-1}
+ {DSA-5271-1 DLA-3172-1}
- libxml2 2.9.14+dfsg-1.1 (bug #1022224)
NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/libxml2/-/commit/c846986356fc149915a74972bf198abc266bc2c0
(v2.10.3)
CVE-2022-40302
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/304f8022efda2eddaaa17456a4ca1d9210180eff
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/304f8022efda2eddaaa17456a4ca1d9210180eff
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
