Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2e15f6c5 by Salvatore Bonaccorso at 2022-01-28T05:52:00+01:00
Add CVE-2021-4091/389-ds-base
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -10612,8 +10612,11 @@ CVE-2021-4093
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2028584
CVE-2021-4092 (yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF)
...)
NOT-FOR-US: yetiforcecrm
-CVE-2021-4091
+CVE-2021-4091 [double-free of the virtual attribute context in persistent
search]
RESERVED
+ - 389-ds-base <unfixed>
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2030307
+ NOTE: Introduced by:
https://github.com/389ds/389-ds-base/commit/74c666b83e3e1789c2ef3f7935c327bd7555193e
(389-ds-base-1.3.6.4)
CVE-2021-4090 [Overflow of bmval[bmlen-1] in nfsd4_decode_bitmap function]
RESERVED
- linux 5.15.5-1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2e15f6c5667dc38a06e322dfc5a21efda4562790
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2e15f6c5667dc38a06e322dfc5a21efda4562790
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
