diff options
| author | Moritz Mühlenhoff <jmm@debian.org> | 2021-11-11 22:24:57 +0100 |
|---|---|---|
| committer | Moritz Mühlenhoff <jmm@debian.org> | 2021-11-11 22:24:57 +0100 |
| commit | e434b6353f75341a077a1353b2192f62428e4d6b (patch) | |
| tree | c542043293f6c89346023cdff150e175289d3e30 /data | |
| parent | 7de02388cacfdbd7ad80e2de063e39207b97bbd3 (diff) | |
postgres, node-tar DSAs
Diffstat (limited to 'data')
| -rw-r--r-- | data/CVE/list | 2 | ||||
| -rw-r--r-- | data/DSA/list | 9 | ||||
| -rw-r--r-- | data/dsa-needed.txt | 7 |
3 files changed, 11 insertions, 7 deletions
diff --git a/data/CVE/list b/data/CVE/list index 1adc142ed4..ed5e132750 100644 --- a/data/CVE/list +++ b/data/CVE/list @@ -16195,6 +16195,7 @@ CVE-2021-37713 (The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0 NOTE: https://github.com/npm/node-tar/security/advisories/GHSA-5955-9wpr-37jh CVE-2021-37712 (The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, a ...) - node-tar 6.1.11+~cs11.3.10-1 (bug #993981) + [buster] - node-tar <not-affected> (Vulnerable code not present) [stretch] - node-tar <end-of-life> (Nodejs in stretch not covered by security support) NOTE: https://github.com/npm/node-tar/security/advisories/GHSA-qq89-hq3f-393p CVE-2021-37711 (Versions prior to 6.4.3.1 contain an authenticated server-side request ...) @@ -16219,6 +16220,7 @@ CVE-2021-37702 (Pimcore is an open source data & experience management platf NOT-FOR-US: Pimcore CVE-2021-37701 (The npm package "tar" (aka node-tar) before versions 4.4.16, 5.0.8, an ...) - node-tar 6.1.7+~cs11.3.10-1 + [buster] - node-tar <not-affected> (Vulnerable code not present) [stretch] - node-tar <end-of-life> (Nodejs in stretch not covered by security support) NOTE: https://github.com/npm/node-tar/security/advisories/GHSA-9r2w-394v-53qc CVE-2021-37700 (@github/paste-markdown is an npm package for pasting markdown objects. ...) diff --git a/data/DSA/list b/data/DSA/list index 8a59bd0e1a..d990718116 100644 --- a/data/DSA/list +++ b/data/DSA/list @@ -1,3 +1,12 @@ +[11 Nov 2021] DSA-5008-1 node-tar - security update + {CVE-2021-37701 CVE-2021-37712} + [bullseye] - node-tar 6.0.5+ds1+~cs11.3.9-1+deb11u2 +[11 Nov 2021] DSA-5007-1 postgresql-13 - security update + {CVE-2021-23214 CVE-2021-23222} + [bullseye] - postgresql-13 13.5-0+deb11u1 +[11 Nov 2021] DSA-5006-1 postgresql-11 - security update + {CVE-2021-23214 CVE-2021-23222} + [buster] - postgresql-11 11.14-0+deb10u1 [10 Nov 2021] DSA-5005-1 ruby-kaminari - security update {CVE-2020-11082} [buster] - ruby-kaminari 1.0.1-4+deb10u1 diff --git a/data/dsa-needed.txt b/data/dsa-needed.txt index 7674a63535..a6d608d867 100644 --- a/data/dsa-needed.txt +++ b/data/dsa-needed.txt @@ -37,13 +37,6 @@ ndpi/oldstable -- nodejs (jmm) -- -node-tar/stable - yadd prepared an update for bullseye fixing two CVEs and one un-CVEified issue --- -postgresql-11/oldstable (jmm) --- -postgresql-13/stable (jmm) --- puppetdb (jmm) -- python-pysaml2 (jmm) |