Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
781e1d6a by Salvatore Bonaccorso at 2022-12-30T07:30:21+01:00
Add CVE-2022-4842/linux
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -77,8 +77,13 @@ CVE-2022-4843 (NULL Pointer Dereference in GitHub repository
radareorg/radare2 p
NOTE: https://huntr.dev/bounties/075b2760-66a0-4d38-b3b5-e9934956ab7f
NOTE:
https://github.com/radareorg/radare2/commit/842f809d4ec6a12af2906f948657281c9ebc8a24
TODO: check, possibly introduced later as released version in unstable
(5.5.0+dfsg-1)
-CVE-2022-4842
+CVE-2022-4842 [ntfs3: NULL pointer dereference in attr_punch_hole() in
fs/ntfs3/attrib.c]
RESERVED
+ - linux <unfixed> (unimportant)
+ [bullseye] - linux <not-affected> (Vulnerable code not present)
+ [buster] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2156927
+ NOTE: NTFS3 driver not enabled in Debian
CVE-2022-4841 (Cross-site Scripting (XSS) - Stored in GitHub repository
usememos/memo ...)
NOT-FOR-US: usememos
CVE-2022-4840 (Cross-site Scripting (XSS) - Stored in GitHub repository
usememos/memo ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/781e1d6aed73efe6564bddfefff0604c90bb2dd7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/781e1d6aed73efe6564bddfefff0604c90bb2dd7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
