"-Synchronized-Data."

This commit is contained in:
CVE Team 2022-10-19 08:00:38 +00:00
parent c096d41335
commit 3c5bb25a65
No known key found for this signature in database
GPG Key ID: E3252B3D49582C98
24 changed files with 209 additions and 6 deletions

View File

@ -68,6 +68,11 @@
"refsource": "MISC",
"name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0fa3ecd87848",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0fa3ecd87848"
},
{
"refsource": "DEBIAN",
"name": "DSA-5257",
"url": "https://www.debian.org/security/2022/dsa-5257"
}
]
},

View File

@ -58,6 +58,11 @@
"refsource": "MISC",
"name": "https://access.redhat.com/security/cve/CVE-2022-0171",
"url": "https://access.redhat.com/security/cve/CVE-2022-0171"
},
{
"refsource": "DEBIAN",
"name": "DSA-5257",
"url": "https://www.debian.org/security/2022/dsa-5257"
}
]
},

View File

@ -58,6 +58,11 @@
"refsource": "MISC",
"name": "https://ubuntu.com/security/CVE-2022-1184",
"url": "https://ubuntu.com/security/CVE-2022-1184"
},
{
"refsource": "DEBIAN",
"name": "DSA-5257",
"url": "https://www.debian.org/security/2022/dsa-5257"
}
]
},

View File

@ -48,6 +48,11 @@
"refsource": "MISC",
"name": "https://source.android.com/security/bulletin/2022-10-01",
"url": "https://source.android.com/security/bulletin/2022-10-01"
},
{
"refsource": "DEBIAN",
"name": "DSA-5257",
"url": "https://www.debian.org/security/2022/dsa-5257"
}
]
},

View File

@ -68,6 +68,11 @@
"refsource": "MISC",
"name": "https://www.youtube.com/watch?v=WIq-YgQuYCA",
"url": "https://www.youtube.com/watch?v=WIq-YgQuYCA"
},
{
"refsource": "DEBIAN",
"name": "DSA-5257",
"url": "https://www.debian.org/security/2022/dsa-5257"
}
]
},

View File

@ -161,6 +161,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20221018 [SECURITY] [DLA 3155-1] bcel security update",
"url": "https://lists.debian.org/debian-lts-announce/2022/10/msg00024.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-5256",
"url": "https://www.debian.org/security/2022/dsa-5256"
}
]
},

View File

@ -66,6 +66,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-5257",
"url": "https://www.debian.org/security/2022/dsa-5257"
}
]
}

View File

@ -48,6 +48,11 @@
"refsource": "MISC",
"name": "https://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev.git/commit/?id=15cf0b82271b1823fb02ab8c377badba614d95d5",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev.git/commit/?id=15cf0b82271b1823fb02ab8c377badba614d95d5"
},
{
"refsource": "DEBIAN",
"name": "DSA-5257",
"url": "https://www.debian.org/security/2022/dsa-5257"
}
]
},

View File

@ -89,6 +89,11 @@
"refsource": "MISC",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit?h=linux-5.4.y&id=fc78b2fc21f10c4c9c4d5d659a685710ffa63659",
"name": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit?h=linux-5.4.y&id=fc78b2fc21f10c4c9c4d5d659a685710ffa63659"
},
{
"refsource": "DEBIAN",
"name": "DSA-5257",
"url": "https://www.debian.org/security/2022/dsa-5257"
}
]
},

View File

@ -53,6 +53,11 @@
"refsource": "MISC",
"name": "https://lore.kernel.org/all/CAFcO6XN7JDM4xSXGhtusQfS2mSBcx50VJKwQpCq=WeLt57aaZA@mail.gmail.com/",
"url": "https://lore.kernel.org/all/CAFcO6XN7JDM4xSXGhtusQfS2mSBcx50VJKwQpCq=WeLt57aaZA@mail.gmail.com/"
},
{
"refsource": "DEBIAN",
"name": "DSA-5257",
"url": "https://www.debian.org/security/2022/dsa-5257"
}
]
},

View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2022-3600",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2022-3601",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2022-3602",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2022-3603",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

View File

@ -61,6 +61,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-5257",
"url": "https://www.debian.org/security/2022/dsa-5257"
}
]
}

View File

@ -42,7 +42,7 @@
"description_data": [
{
"lang": "eng",
"value": "Prior to 2.0.0-M9, it was possible for an end-user to set the value of an editable string property of a domain object to a value that would be rendered unchanged when the value was saved. In particular, the end-user could enter javascript or similar and this would be executed.\n\nAs of this release, the inputted strings are properly escaped when rendered."
"value": "Prior to 2.0.0-M9, it was possible for an end-user to set the value of an editable string property of a domain object to a value that would be rendered unchanged when the value was saved. In particular, the end-user could enter javascript or similar and this would be executed. As of this release, the inputted strings are properly escaped when rendered."
}
]
},
@ -69,8 +69,9 @@
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"url": "https://lists.apache.org/thread/83ftj5jgtv3mbm28w3trjyvd591jztrz"
"refsource": "MISC",
"url": "https://lists.apache.org/thread/83ftj5jgtv3mbm28w3trjyvd591jztrz",
"name": "https://lists.apache.org/thread/83ftj5jgtv3mbm28w3trjyvd591jztrz"
}
]
},

View File

@ -43,7 +43,7 @@
"description_data": [
{
"lang": "eng",
"value": "When running in prototype mode, the h2 webconsole module (accessible from the Prototype menu) is automatically made available with the ability to directly query the database. \n\nIt was felt that it is safer to require the developer to explicitly enable this capability. As of 2.0.0-M8, this can now be done using the 'isis.prototyping.h2-console.web-allow-remote-access' configuration property; the web console will be unavailable without setting this configuration. \n\nAs an additional safeguard, the new 'isis.prototyping.h2-console.generate-random-web-admin-password' configuration parameter (enabled by default) requires that the administrator use a randomly generated password to use the console. The password is printed to the log, as \"webAdminPass: xxx\" (where \"xxx\") is the password. \n\nTo revert to the original behaviour, the administrator would therefore need to set these configuration parameter:\n\n isis.prototyping.h2-console.web-allow-remote-access=true\n isis.prototyping.h2-console.generate-random-web-admin-password=false\n\nNote also that the h2 webconsole is never available in production mode, so these safeguards are only to ensure that the webconsole is secured by default also in prototype mode. "
"value": "When running in prototype mode, the h2 webconsole module (accessible from the Prototype menu) is automatically made available with the ability to directly query the database. It was felt that it is safer to require the developer to explicitly enable this capability. As of 2.0.0-M8, this can now be done using the 'isis.prototyping.h2-console.web-allow-remote-access' configuration property; the web console will be unavailable without setting this configuration. As an additional safeguard, the new 'isis.prototyping.h2-console.generate-random-web-admin-password' configuration parameter (enabled by default) requires that the administrator use a randomly generated password to use the console. The password is printed to the log, as \"webAdminPass: xxx\" (where \"xxx\") is the password. To revert to the original behaviour, the administrator would therefore need to set these configuration parameter: isis.prototyping.h2-console.web-allow-remote-access=true isis.prototyping.h2-console.generate-random-web-admin-password=false Note also that the h2 webconsole is never available in production mode, so these safeguards are only to ensure that the webconsole is secured by default also in prototype mode."
}
]
},
@ -70,8 +70,9 @@
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"url": "https://lists.apache.org/thread/jbv2ddt00h7ntlbm6vkk4wdmb31pm8q3"
"refsource": "MISC",
"url": "https://lists.apache.org/thread/jbv2ddt00h7ntlbm6vkk4wdmb31pm8q3",
"name": "https://lists.apache.org/thread/jbv2ddt00h7ntlbm6vkk4wdmb31pm8q3"
}
]
},

View File

@ -86,6 +86,11 @@
"refsource": "FEDORA",
"name": "FEDORA-2022-1a5b125ac6",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/"
},
{
"refsource": "DEBIAN",
"name": "DSA-5257",
"url": "https://www.debian.org/security/2022/dsa-5257"
}
]
}

View File

@ -81,6 +81,11 @@
"refsource": "FEDORA",
"name": "FEDORA-2022-1a5b125ac6",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/"
},
{
"refsource": "DEBIAN",
"name": "DSA-5257",
"url": "https://www.debian.org/security/2022/dsa-5257"
}
]
}

View File

@ -81,6 +81,11 @@
"refsource": "FEDORA",
"name": "FEDORA-2022-1a5b125ac6",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/"
},
{
"refsource": "DEBIAN",
"name": "DSA-5257",
"url": "https://www.debian.org/security/2022/dsa-5257"
}
]
}

View File

@ -81,6 +81,11 @@
"refsource": "FEDORA",
"name": "FEDORA-2022-1a5b125ac6",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/"
},
{
"refsource": "DEBIAN",
"name": "DSA-5257",
"url": "https://www.debian.org/security/2022/dsa-5257"
}
]
}

View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2022-43436",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2022-43437",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2022-43438",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}