Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: a77ca751 by security tracker role at 2021-03-08T08:10:17+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,81 @@ +CVE-2021-28088 + RESERVED +CVE-2021-28087 + RESERVED +CVE-2021-28086 + RESERVED +CVE-2021-28085 + RESERVED +CVE-2021-28084 + RESERVED +CVE-2021-28083 + RESERVED +CVE-2021-28082 + RESERVED +CVE-2021-28081 + RESERVED +CVE-2021-28080 + RESERVED +CVE-2021-28079 + RESERVED +CVE-2021-28078 + RESERVED +CVE-2021-28077 + RESERVED +CVE-2021-28076 + RESERVED +CVE-2021-28075 + RESERVED +CVE-2021-28074 + RESERVED +CVE-2021-28073 + RESERVED +CVE-2021-28072 + RESERVED +CVE-2021-28071 + RESERVED +CVE-2021-28070 + RESERVED +CVE-2021-28069 + RESERVED +CVE-2021-28068 + RESERVED +CVE-2021-28067 + RESERVED +CVE-2021-28066 + RESERVED +CVE-2021-28065 + RESERVED +CVE-2021-28064 + RESERVED +CVE-2021-28063 + RESERVED +CVE-2021-28062 + RESERVED +CVE-2021-28061 + RESERVED +CVE-2021-28060 + RESERVED +CVE-2021-28059 + RESERVED +CVE-2021-28058 + RESERVED +CVE-2021-28057 + RESERVED +CVE-2021-28056 + RESERVED +CVE-2021-28055 + RESERVED +CVE-2021-28054 + RESERVED +CVE-2021-28053 + RESERVED +CVE-2021-28052 + RESERVED +CVE-2021-28051 + RESERVED +CVE-2021-28050 + RESERVED CVE-2009-20001 (An issue was discovered in MantisBT before 2.24.5. It associates a uni ...) - mantis <removed> CVE-2021-28049 @@ -224,6 +302,7 @@ CVE-2021-28039 (An issue was discovered in the Linux kernel 5.9.x through 5.11.3 [stretch] - linux <not-affected> (Vulnerable code introduced later) NOTE: https://xenbits.xen.org/xsa/advisory-369.html CVE-2021-28038 (An issue was discovered in the Linux kernel through 5.11.3, as used wi ...) + {DLA-2586-1} - linux <unfixed> NOTE: https://xenbits.xen.org/xsa/advisory-367.html CVE-2021-3422 @@ -1483,13 +1562,16 @@ CVE-2021-27367 (Controller/Backend/FileEditController.php and Controller/Backend CVE-2021-27366 RESERVED CVE-2021-27365 (An issue was discovered in the Linux kernel through 5.11.3. Certain iS ...) + {DLA-2586-1} - linux <unfixed> NOTE: https://git.kernel.org/linus/ec98ea7070e94cc25a422ec97d1421e28d97b7ee NOTE: https://git.kernel.org/linus/f9dbdf97a5bd92b1a49cee3d591b55b11fd7a6d5 CVE-2021-27364 (An issue was discovered in the Linux kernel through 5.11.3. drivers/sc ...) + {DLA-2586-1} - linux <unfixed> NOTE: https://git.kernel.org/linus/688e8128b7a92df982709a4137ea4588d16f24aa CVE-2021-27363 (An issue was discovered in the Linux kernel through 5.11.3. A kernel p ...) + {DLA-2586-1} - linux <unfixed> NOTE: https://git.kernel.org/linus/688e8128b7a92df982709a4137ea4588d16f24aa CVE-2020-36245 (GramAddict through 1.2.3 allows remote attackers to execute arbitrary ...) @@ -2442,12 +2524,15 @@ CVE-2021-26933 (An issue was discovered in Xen 4.9 through 4.14.x. On Arm, a gue [stretch] - xen <end-of-life> (DSA 4602-1) NOTE: https://xenbits.xen.org/xsa/advisory-364.html CVE-2021-26932 (An issue was discovered in the Linux kernel 3.2 through 5.10.16, as us ...) + {DLA-2586-1} - linux 5.10.19-1 NOTE: https://xenbits.xen.org/xsa/advisory-361.html CVE-2021-26931 (An issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as ...) + {DLA-2586-1} - linux 5.10.19-1 NOTE: https://xenbits.xen.org/xsa/advisory-362.html CVE-2021-26930 (An issue was discovered in the Linux kernel 3.11 through 5.10.16, as u ...) + {DLA-2586-1} - linux 5.10.19-1 NOTE: https://xenbits.xen.org/xsa/advisory-365.html CVE-2021-26929 (An XSS issue was discovered in Horde Groupware Webmail Edition through ...) @@ -3937,7 +4022,7 @@ CVE-2021-3348 (nbd_add_socket in drivers/block/nbd.c in the Linux kernel through [stretch] - linux <not-affected> (Vulnerable code not present) NOTE: https://git.kernel.org/linus/b98e762e3d71e893b221f871825dc64694cfb258 (5.11-rc6) CVE-2021-3347 (An issue was discovered in the Linux kernel through 5.10.11. PI futexe ...) - {DSA-4843-1 DLA-2557-1} + {DSA-4843-1 DLA-2586-1 DLA-2557-1} - linux 5.10.12-1 NOTE: https://www.openwall.com/lists/oss-security/2021/01/29/1 CVE-2021-3343 @@ -6458,6 +6543,7 @@ CVE-2021-25313 (A Improper Neutralization of Input During Web Page Generation (' CVE-2021-3179 RESERVED CVE-2021-3178 (** DISPUTED ** fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, w ...) + {DLA-2586-1} - linux 5.10.12-1 (unimportant) [buster] - linux 4.19.171-1 NOTE: https://patchwork.kernel.org/project/linux-nfs/patch/20210111210129.ga11...@fieldses.org/ @@ -10711,8 +10797,8 @@ CVE-2021-23353 RESERVED CVE-2021-23352 RESERVED -CVE-2021-23351 - RESERVED +CVE-2021-23351 (The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable ...) + TODO: check CVE-2021-23350 RESERVED CVE-2021-23349 @@ -14651,7 +14737,7 @@ CVE-2021-21497 CVE-2021-21496 RESERVED CVE-2020-36158 (mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifie ...) - {DSA-4843-1 DLA-2557-1} + {DSA-4843-1 DLA-2586-1 DLA-2557-1} - linux 5.10.5-1 NOTE: https://git.kernel.org/linus/5c455c5ab332773464d02ba17015acdca198f03d (5.11-rc1) CVE-2020-36157 (An issue was discovered in the Ultimate Member plugin before 2.1.12 fo ...) @@ -15342,7 +15428,8 @@ CVE-2019-25010 (An issue was discovered in the failure crate through 2019-11-13 CVE-2019-25009 (An issue was discovered in the http crate before 0.1.20 for Rust. The ...) - rust-http <unfixed> NOTE: https://rustsec.org/advisories/RUSTSEC-2019-0034.html -CVE-2019-25008 (An issue was discovered in the http crate before 0.1.20 for Rust. Head ...) +CVE-2019-25008 + REJECTED - rust-http 0.1.19-2 (bug #969896) [buster] - rust-http <no-dsa> (Minor issue) NOTE: https://rustsec.org/advisories/RUSTSEC-2019-0033.html @@ -21716,12 +21803,12 @@ CVE-2020-29663 (Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where r CVE-2020-29662 (In Harbor 2.0 before 2.0.5 and 2.1.x before 2.1.2 the catalog’s ...) NOT-FOR-US: Harbor CVE-2020-29661 (A locking issue was discovered in the tty subsystem of the Linux kerne ...) - {DSA-4843-1 DLA-2557-1} + {DSA-4843-1 DLA-2586-1 DLA-2557-1} - linux 5.9.15-1 NOTE: https://git.kernel.org/linus/54ffccbf053b5b6ca4f6e45094b942fab92a25fc NOTE: https://bugs.chromium.org/p/project-zero/issues/detail?id=2125 CVE-2020-29660 (A locking inconsistency issue was discovered in the tty subsystem of t ...) - {DSA-4843-1 DLA-2557-1} + {DSA-4843-1 DLA-2586-1 DLA-2557-1} - linux 5.9.15-1 NOTE: https://git.kernel.org/linus/c8bcd9c5be24fb9e6132e97da5a35e55a83e36b9 NOTE: https://bugs.chromium.org/p/project-zero/issues/detail?id=2125 @@ -22473,11 +22560,11 @@ CVE-2020-29570 (An issue was discovered in Xen through 4.14.x. Recording of the [stretch] - xen <end-of-life> (DSA 4602-1) NOTE: https://xenbits.xen.org/xsa/advisory-358.html CVE-2020-29569 (An issue was discovered in the Linux kernel through 5.10.1, as used wi ...) - {DSA-4843-1 DLA-2557-1} + {DSA-4843-1 DLA-2586-1 DLA-2557-1} - linux 5.9.15-1 NOTE: https://xenbits.xen.org/xsa/advisory-350.html CVE-2020-29568 (An issue was discovered in Xen through 4.14.x. Some OSes (such as Linu ...) - {DSA-4843-1 DLA-2557-1} + {DSA-4843-1 DLA-2586-1 DLA-2557-1} - linux 5.9.15-1 NOTE: https://xenbits.xen.org/xsa/advisory-349.html CVE-2020-29567 (An issue was discovered in Xen 4.14.x. When moving IRQs between CPUs t ...) @@ -26579,7 +26666,7 @@ CVE-2020-28376 CVE-2020-28375 RESERVED CVE-2020-28374 (In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10. ...) - {DSA-4843-1 DLA-2557-1} + {DSA-4843-1 DLA-2586-1 DLA-2557-1} - linux 5.10.9-1 NOTE: https://git.kernel.org/linus/2896c93811e39d63a4d9b63ccf12a8fbc226e5e4 NOTE: https://www.openwall.com/lists/oss-security/2021/01/12/12 @@ -29574,7 +29661,7 @@ CVE-2020-27826 RESERVED NOT-FOR-US: Keycloak CVE-2020-27825 (A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux ...) - {DSA-4843-1 DLA-2557-1} + {DSA-4843-1 DLA-2586-1 DLA-2557-1} - linux 5.9.6-1 NOTE: https://git.kernel.org/linus/bbeb97464eefc65f506084fd9f18f21653e01137 CVE-2020-27824 [global-buffer-overflow read in lib-openjp2] @@ -29616,7 +29703,7 @@ CVE-2020-27816 (The elasticsearch-operator does not validate the namespace where NOT-FOR-US: OpenShift Elasticsearch operator CVE-2020-27815 RESERVED - {DSA-4843-1 DLA-2557-1} + {DSA-4843-1 DLA-2586-1 DLA-2557-1} - linux 5.10.4-1 NOTE: https://www.openwall.com/lists/oss-security/2020/11/30/5 CVE-2020-27814 (A heap-buffer overflow was found in the way openjpeg2 handled certain ...) @@ -61440,7 +61527,7 @@ CVE-2020-13850 (Artica Pandora FMS 7.44 has inadequate access controls on a web CVE-2020-13849 (The MQTT protocol 3.1.1 requires a server to set a timeout value of 1. ...) NOT-FOR-US: MQTT protocol flaw CVE-2020-13848 (Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attac ...) - {DLA-2238-1} + {DLA-2585-1 DLA-2238-1} - pupnp-1.8 <unfixed> (bug #962282) [buster] - pupnp-1.8 <no-dsa> (Minor issue) - libupnp <removed> @@ -89832,7 +89919,7 @@ CVE-2019-19818 (The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12. CVE-2019-19817 (The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.11 ...) NOT-FOR-US: JBIG2Globals library in npdf.dll in Nitro Free PDF Reader CVE-2019-19816 (In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image ...) - {DLA-2483-1 DLA-2385-1} + {DLA-2586-1 DLA-2483-1 DLA-2385-1} - linux 5.2.6-1 [buster] - linux 4.19.160-1 NOTE: https://git.kernel.org/linus/6bf9e4bd6a277840d3fe8c5d5d530a1fbd3db592 @@ -89843,7 +89930,7 @@ CVE-2019-19815 (In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem i CVE-2019-19814 (In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image c ...) - linux <unfixed> CVE-2019-19813 (In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, ...) - {DLA-2385-1} + {DLA-2586-1 DLA-2385-1} - linux 5.2.6-1 [buster] - linux 4.19.146-1 NOTE: https://git.kernel.org/linus/6bf9e4bd6a277840d3fe8c5d5d530a1fbd3db592 @@ -95590,6 +95677,7 @@ CVE-2019-19319 (In the Linux kernel before 5.2, a setxattr operation, after a mo - linux 5.2.6-1 [buster] - linux 4.19.87-1 CVE-2019-19318 (In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can c ...) + {DLA-2586-1} - linux 5.4.6-1 [buster] - linux 4.19.146-1 NOTE: https://git.kernel.org/linus/9f7fec0ba89108b9385f1b9fb167861224912a4a View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a77ca75159e0f5857907e4b7ed050eae4b1264bd -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a77ca75159e0f5857907e4b7ed050eae4b1264bd You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits