|
1 | 1 | { |
2 | 2 | "schema_version": "1.4.0", |
3 | 3 | "id": "GHSA-j39c-c8hj-x4j3", |
4 | | - "modified": "2022-02-08T21:34:09Z", |
| 4 | + "modified": "2026-06-05T17:40:09Z", |
5 | 5 | "published": "2021-06-16T17:45:29Z", |
6 | 6 | "aliases": [ |
7 | 7 | "CVE-2021-25122" |
|
25 | 25 | "type": "ECOSYSTEM", |
26 | 26 | "events": [ |
27 | 27 | { |
28 | | - "introduced": "10.0.0" |
| 28 | + "introduced": "10.0.0-M1" |
29 | 29 | }, |
30 | 30 | { |
31 | 31 | "fixed": "10.0.2" |
|
44 | 44 | "type": "ECOSYSTEM", |
45 | 45 | "events": [ |
46 | 46 | { |
47 | | - "introduced": "9.0.0" |
| 47 | + "introduced": "9.0.0-M1" |
48 | 48 | }, |
49 | 49 | { |
50 | 50 | "fixed": "9.0.43" |
|
71 | 71 | ] |
72 | 72 | } |
73 | 73 | ] |
| 74 | + }, |
| 75 | + { |
| 76 | + "package": { |
| 77 | + "ecosystem": "Maven", |
| 78 | + "name": "org.apache.tomcat:tomcat-coyote" |
| 79 | + }, |
| 80 | + "ranges": [ |
| 81 | + { |
| 82 | + "type": "ECOSYSTEM", |
| 83 | + "events": [ |
| 84 | + { |
| 85 | + "introduced": "10.0.0-M1" |
| 86 | + }, |
| 87 | + { |
| 88 | + "fixed": "10.0.2" |
| 89 | + } |
| 90 | + ] |
| 91 | + } |
| 92 | + ] |
74 | 93 | } |
75 | 94 | ], |
76 | 95 | "references": [ |
|
80 | 99 | }, |
81 | 100 | { |
82 | 101 | "type": "WEB", |
83 | | - "url": "https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cannounce.tomcat.apache.org%3E" |
| 102 | + "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" |
84 | 103 | }, |
85 | 104 | { |
86 | 105 | "type": "WEB", |
87 | | - "url": "https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7@%3Cannounce.apache.org%3E" |
| 106 | + "url": "https://www.oracle.com/security-alerts/cpujan2022.html" |
88 | 107 | }, |
89 | 108 | { |
90 | 109 | "type": "WEB", |
91 | | - "url": "https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7@%3Cannounce.tomcat.apache.org%3E" |
| 110 | + "url": "https://www.oracle.com//security-alerts/cpujul2021.html" |
92 | 111 | }, |
93 | 112 | { |
94 | 113 | "type": "WEB", |
95 | | - "url": "https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7@%3Cdev.tomcat.apache.org%3E" |
| 114 | + "url": "https://www.debian.org/security/2021/dsa-4891" |
96 | 115 | }, |
97 | 116 | { |
98 | 117 | "type": "WEB", |
99 | | - "url": "https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7@%3Cusers.tomcat.apache.org%3E" |
| 118 | + "url": "https://security.netapp.com/advisory/ntap-20210409-0002" |
100 | 119 | }, |
101 | 120 | { |
102 | 121 | "type": "WEB", |
103 | | - "url": "https://lists.apache.org/thread.html/rcd90bf36b1877e1310b87ecd14ed7bbb15da52b297efd9f0e7253a3b@%3Cusers.tomcat.apache.org%3E" |
| 122 | + "url": "https://security.gentoo.org/glsa/202208-34" |
104 | 123 | }, |
105 | 124 | { |
106 | 125 | "type": "WEB", |
107 | | - "url": "https://lists.apache.org/thread.html/rd0463f9a5cbc02a485404c4b990f0da452e5ac5c237808edba11c947@%3Cusers.tomcat.apache.org%3E" |
| 126 | + "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00018.html" |
108 | 127 | }, |
109 | 128 | { |
110 | 129 | "type": "WEB", |
111 | 130 | "url": "https://lists.apache.org/thread.html/rf6d5d57b114678d8898005faef31e9fd6d7c981fcc4ccfc3bc272fc9@%3Cdev.tomcat.apache.org%3E" |
112 | 131 | }, |
113 | 132 | { |
114 | 133 | "type": "WEB", |
115 | | - "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00018.html" |
| 134 | + "url": "https://lists.apache.org/thread.html/rd0463f9a5cbc02a485404c4b990f0da452e5ac5c237808edba11c947@%3Cusers.tomcat.apache.org%3E" |
116 | 135 | }, |
117 | 136 | { |
118 | 137 | "type": "WEB", |
119 | | - "url": "https://security.gentoo.org/glsa/202208-34" |
| 138 | + "url": "https://lists.apache.org/thread.html/rcd90bf36b1877e1310b87ecd14ed7bbb15da52b297efd9f0e7253a3b@%3Cusers.tomcat.apache.org%3E" |
120 | 139 | }, |
121 | 140 | { |
122 | 141 | "type": "WEB", |
123 | | - "url": "https://security.netapp.com/advisory/ntap-20210409-0002" |
| 142 | + "url": "https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7@%3Cusers.tomcat.apache.org%3E" |
124 | 143 | }, |
125 | 144 | { |
126 | 145 | "type": "WEB", |
127 | | - "url": "https://www.debian.org/security/2021/dsa-4891" |
| 146 | + "url": "https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7@%3Cdev.tomcat.apache.org%3E" |
128 | 147 | }, |
129 | 148 | { |
130 | 149 | "type": "WEB", |
131 | | - "url": "https://www.oracle.com//security-alerts/cpujul2021.html" |
| 150 | + "url": "https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7@%3Cannounce.tomcat.apache.org%3E" |
132 | 151 | }, |
133 | 152 | { |
134 | 153 | "type": "WEB", |
135 | | - "url": "https://www.oracle.com/security-alerts/cpujan2022.html" |
| 154 | + "url": "https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7@%3Cannounce.apache.org%3E" |
136 | 155 | }, |
137 | 156 | { |
138 | 157 | "type": "WEB", |
139 | | - "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" |
| 158 | + "url": "https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cannounce.tomcat.apache.org%3E" |
| 159 | + }, |
| 160 | + { |
| 161 | + "type": "PACKAGE", |
| 162 | + "url": "https://github.com/apache/tomcat" |
140 | 163 | }, |
141 | 164 | { |
142 | 165 | "type": "WEB", |
|
0 commit comments