aboutsummaryrefslogtreecommitdiff
path: root/security/vuxml/vuln/2022.xml
diff options
context:
space:
mode:
Diffstat (limited to 'security/vuxml/vuln/2022.xml')
-rw-r--r--security/vuxml/vuln/2022.xml6
1 files changed, 3 insertions, 3 deletions
diff --git a/security/vuxml/vuln/2022.xml b/security/vuxml/vuln/2022.xml
index ed08974d84aa..2d1a028b23bf 100644
--- a/security/vuxml/vuln/2022.xml
+++ b/security/vuxml/vuln/2022.xml
@@ -1583,8 +1583,8 @@
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
- <p>SO-AND-SO reports:</p>
- <blockquote cite="INSERT URL HERE">
+ <p>CVE.org reports:</p>
+ <blockquote cite="https://www.cve.org/CVERecord?id=CVE-2022-43995">
<p>Sudo 1.8.0 through 1.9.12, with the crypt() password backend,
contains a plugins/sudoers/auth/passwd.c array-out-of-bounds
error that can result in a heap-based buffer over-read. This
@@ -5040,7 +5040,7 @@
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
- <p>SO-AND-SO reports:</p>
+ <p>The Django Project reports:</p>
<blockquote cite="https://www.djangoproject.com/weblog/2022/jul/04/security-releases/">
<p>CVE-2022-34265: Potential SQL injection via Trunc(kind) and
Extract(lookup_name) arguments.</p>