Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
60002539 by Moritz Muehlenhoff at 2022-07-23T20:02:47+02:00
djangorestframework CVEfied
- - - - -
2 changed files:
- data/CVE/list
- data/DSA/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -51,7 +51,9 @@ CVE-2022-2517
CVE-2022-2516
RESERVED
CVE-2018-25045 (Django REST framework (aka django-rest-framework) before 3.9.1
allows ...)
- TODO: check
+ - djangorestframework 3.10.2-1
+ [buster] - djangorestframework 3.9.0-1+deb10u1
+ NOTE:
https://github.com/encode/django-rest-framework/commit/4bb9a3c48427867ef1e46f7dee945a4c25a4f9b8
(3.9.1)
CVE-2022-36407
RESERVED
CVE-2022-36389
@@ -128,10 +130,6 @@ CVE-2022-2511 (Cross-site Scripting (XSS) vulnerability in
the "commonuserinterf
NOT-FOR-US: BlueSpice
CVE-2022-2510 (Cross-site Scripting (XSS) vulnerability in
"Extension:ExtendedSearch" ...)
NOT-FOR-US: BlueSpice
-CVE-2019-XXXX [djangorestframework XSS]
- - djangorestframework 3.10.2-1
- [buster] - djangorestframework 3.9.0-1+deb10u1
- NOTE:
https://github.com/encode/django-rest-framework/commit/4bb9a3c48427867ef1e46f7dee945a4c25a4f9b8
(3.9.1)
CVE-2022-36372
RESERVED
CVE-2022-36367
=====================================
data/DSA/list
=====================================
@@ -6,7 +6,7 @@
{CVE-2022-2163 CVE-2022-2477 CVE-2022-2478 CVE-2022-2479 CVE-2022-2480
CVE-2022-2481}
[bullseye] - chromium 103.0.5060.134-1~deb11u1
[22 Jul 2022] DSA-5186-1 djangorestframework - security update
- {CVE-2020-25626}
+ {CVE-2020-25626 CVE-2018-25045}
[buster] - djangorestframework 3.9.0-1+deb10u1
[15 Jul 2022] DSA-5185-1 mat2 - security update
{CVE-2022-35410}
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/60002539f2dd5a9e86858c2b1b84a44ec351d429
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/60002539f2dd5a9e86858c2b1b84a44ec351d429
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
