Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0ba18c60 by Moritz Mühlenhoff at 2023-05-24T18:17:19+02:00
bullseye triage
- - - - -
2 changed files:
- data/CVE/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -52131,6 +52131,7 @@ CVE-2022-41608 (Cross-Site Request Forgery (CSRF)
vulnerability in Thomas Belser
NOT-FOR-US: WordPress plugin
CVE-2022-41606 (HashiCorp Nomad and Nomad Enterprise 1.0.2 up to 1.2.12, and
1.3.5 job ...)
- nomad <unfixed> (bug #1021670)
+ [bullseye] - nomad <no-dsa> (Minor issue)
NOTE:
https://discuss.hashicorp.com/t/hcsec-2022-22-nomad-panics-on-job-submission-with-bad-artifact-stanza-source-url/45420
CVE-2022-41605
RESERVED
@@ -100015,18 +100016,22 @@ CVE-2022-24687 (HashiCorp Consul and Consul
Enterprise 1.9.0 through 1.9.14, 1.1
NOTE:
https://github.com/hashicorp/consul/commit/d35c6a97cbdff252f5238d6b52f49786f896566a
(v1.9.15)
CVE-2022-24686 (HashiCorp Nomad and Nomad Enterprise 0.3.0 through 1.0.17,
1.1.11, and ...)
- nomad <unfixed> (bug #1021273)
+ [bullseye] - nomad <no-dsa> (Minor issue)
NOTE:
https://discuss.hashicorp.com/t/hcsec-2022-01-nomad-artifact-download-race-condition/35559
CVE-2022-24685 (HashiCorp Nomad and Nomad Enterprise 1.0.17, 1.1.11, and 1.2.5
allow i ...)
- nomad <unfixed> (bug #1021273)
+ [bullseye] - nomad <no-dsa> (Minor issue)
NOTE:
https://discuss.hashicorp.com/t/hcsec-2022-03-nomad-malformed-job-parsing-results-in-excessive-cpu-usage/35561
NOTE: https://github.com/hashicorp/nomad/issues/12038
CVE-2022-24684 (HashiCorp Nomad and Nomad Enterprise 0.9.0 through 1.0.16,
1.1.11, and ...)
- nomad <unfixed> (bug #1021273)
+ [bullseye] - nomad <no-dsa> (Minor issue)
NOTE:
https://discuss.hashicorp.com/t/hcsec-2022-04-nomad-spread-job-stanza-may-trigger-panic-in-servers/35562
NOTE: https://github.com/hashicorp/nomad/issues/12039
NOTE:
https://github.com/hashicorp/nomad/commit/c49359ad58f0af18a5697a0b7b9b6cca9656d267
(v1.2.6)
CVE-2022-24683 (HashiCorp Nomad and Nomad Enterprise 0.9.2 through 1.0.17,
1.1.11, and ...)
- nomad <unfixed> (bug #1021273)
+ [bullseye] - nomad <no-dsa> (Minor issue)
NOTE:
https://discuss.hashicorp.com/t/hcsec-2022-02-nomad-alloc-filesystem-and-container-escape/35560
CVE-2022-24682 (An issue was discovered in the Calendar feature in Zimbra
Collaboratio ...)
NOT-FOR-US: Zimbra
@@ -119241,6 +119246,7 @@ CVE-2021-43416
RESERVED
CVE-2021-43415 (HashiCorp Nomad and Nomad Enterprise up to 1.0.13, 1.1.7, and
1.2.0, w ...)
- nomad <unfixed> (bug #1021273)
+ [bullseye] - nomad <no-dsa> (Minor issue)
NOTE:
https://discuss.hashicorp.com/t/hcsec-2021-31-nomad-qemu-task-driver-allowed-paths-bypass-with-job-args/32288
NOTE: https://github.com/hashicorp/nomad/issues/11542
NOTE: https://github.com/hashicorp/nomad/pull/11554
=====================================
data/dsa-needed.txt
=====================================
@@ -18,6 +18,8 @@ c-ares
--
cinder
--
+docker-registry (jmm)
+--
gpac (aron)
--
jupyter-core
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0ba18c601e344b81267580d8ba8d25c51345e74b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0ba18c601e344b81267580d8ba8d25c51345e74b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
