Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 80fe4f5c by security tracker role at 2022-08-25T08:10:14+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,43 @@ +CVE-2022-38744 + RESERVED +CVE-2022-38743 + RESERVED +CVE-2022-38742 + RESERVED +CVE-2022-38741 + RESERVED +CVE-2022-38740 + RESERVED +CVE-2022-38739 + RESERVED +CVE-2022-38738 + RESERVED +CVE-2022-38737 + RESERVED +CVE-2022-38736 + RESERVED +CVE-2022-38735 + RESERVED +CVE-2022-38734 + RESERVED +CVE-2022-38733 + RESERVED +CVE-2022-38732 + RESERVED +CVE-2022-38731 + RESERVED +CVE-2022-2985 + RESERVED +CVE-2022-2984 + RESERVED +CVE-2022-2983 + RESERVED +CVE-2022-2982 + RESERVED +CVE-2022-2981 + RESERVED +CVE-2022-2980 + RESERVED CVE-2022-2979 RESERVED CVE-2022-2978 (A flaw use after free in the Linux kernel NILFS file system was found ...) @@ -5162,8 +5202,8 @@ CVE-2022-36806 RESERVED CVE-2022-36805 RESERVED -CVE-2022-36804 - RESERVED +CVE-2022-36804 (Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7 ...) + TODO: check CVE-2022-36803 RESERVED CVE-2022-36802 @@ -9712,8 +9752,8 @@ CVE-2022-34962 (OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was disc NOT-FOR-US: OpenTeknik CVE-2022-34961 (OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered ...) NOT-FOR-US: OpenTeknik -CVE-2022-34960 - RESERVED +CVE-2022-34960 (The container package in MikroTik RouterOS 7.4beta4 allows an attacker ...) + TODO: check CVE-2022-34959 RESERVED CVE-2022-34958 @@ -15149,10 +15189,10 @@ CVE-2022-32896 RESERVED CVE-2022-32895 RESERVED -CVE-2022-32894 - RESERVED -CVE-2022-32893 - RESERVED +CVE-2022-32894 (An out-of-bounds write issue was addressed with improved bounds checki ...) + TODO: check +CVE-2022-32893 (An out-of-bounds write issue was addressed with improved bounds checki ...) + TODO: check CVE-2022-32892 RESERVED CVE-2022-32891 @@ -15223,8 +15263,8 @@ CVE-2022-32859 RESERVED CVE-2022-32858 RESERVED -CVE-2022-32857 - RESERVED +CVE-2022-32857 (This issue was addressed by using HTTPS when sending information over ...) + TODO: check CVE-2022-32856 RESERVED CVE-2022-32855 @@ -15257,20 +15297,20 @@ CVE-2022-32842 RESERVED CVE-2022-32841 RESERVED -CVE-2022-32840 - RESERVED -CVE-2022-32839 - RESERVED -CVE-2022-32838 - RESERVED -CVE-2022-32837 - RESERVED +CVE-2022-32840 (This issue was addressed with improved checks. This issue is fixed in ...) + TODO: check +CVE-2022-32839 (The issue was addressed with improved bounds checks. This issue is fix ...) + TODO: check +CVE-2022-32838 (A logic issue was addressed with improved state management. This issue ...) + TODO: check +CVE-2022-32837 (This issue was addressed with improved checks. This issue is fixed in ...) + TODO: check CVE-2022-32836 RESERVED CVE-2022-32835 RESERVED -CVE-2022-32834 - RESERVED +CVE-2022-32834 (An access issue was addressed with improvements to the sandbox. This i ...) + TODO: check CVE-2022-32833 RESERVED CVE-2022-32832 @@ -15315,14 +15355,14 @@ CVE-2022-32815 RESERVED CVE-2022-32814 RESERVED -CVE-2022-32813 - RESERVED -CVE-2022-32812 - RESERVED -CVE-2022-32811 - RESERVED -CVE-2022-32810 - RESERVED +CVE-2022-32813 (The issue was addressed with improved memory handling. This issue is f ...) + TODO: check +CVE-2022-32812 (The issue was addressed with improved memory handling. This issue is f ...) + TODO: check +CVE-2022-32811 (A memory corruption vulnerability was addressed with improved locking. ...) + TODO: check +CVE-2022-32810 (The issue was addressed with improved memory handling. This issue is f ...) + TODO: check CVE-2022-32809 RESERVED CVE-2022-32808 @@ -15355,8 +15395,8 @@ CVE-2022-32795 RESERVED CVE-2022-32794 RESERVED -CVE-2022-32793 - RESERVED +CVE-2022-32793 (Multiple out-of-bounds write issues were addressed with improved bound ...) + TODO: check CVE-2022-32792 [An out-of-bounds write issue was addressed with improved input validation] RESERVED {DSA-5211-1 DSA-5210-1 DLA-3073-1} @@ -16316,8 +16356,8 @@ CVE-2022-32429 (An authentication-bypass issue in the component http://MYDEVICEI NOT-FOR-US: Mega System Technologies Inc MSNSwitch CVE-2022-32428 RESERVED -CVE-2022-32427 - RESERVED +CVE-2022-32427 (PrinterLogic Windows Client through 25.0.0.676 allows attackers to exe ...) + TODO: check CVE-2022-32426 RESERVED CVE-2022-32425 (The login function of Mealie v1.0.0beta-2 allows attackers to enumerat ...) @@ -18540,7 +18580,7 @@ CVE-2022-31678 CVE-2022-31677 RESERVED CVE-2022-31676 (VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege es ...) - {DSA-5215-1} + {DSA-5215-1 DLA-3081-1} - open-vm-tools 2:12.1.0-1 (bug #1018012) NOTE: Fixed by: https://github.com/vmware/open-vm-tools/commit/70a74758bfe0042c27f15ce590fb21a2bc54d745 (stable-12.1.0) NOTE: https://github.com/vmware/open-vm-tools/blob/CVE-2022-31676.patch/1205-Properly-check-authorization-on-incoming-guestOps-re.patch @@ -97542,7 +97582,7 @@ CVE-2021-28863 RESERVED CVE-2021-28862 RESERVED -CVE-2021-28861 (Python 3.x through 3.10 has an open redirection vulnerability in lib/h ...) +CVE-2021-28861 (** DISPUTED ** Python 3.x through 3.10 has an open redirection vulnera ...) TODO: check CVE-2021-28860 (In Node.js mixme, prior to v0.5.1, an attacker can add or alter proper ...) NOT-FOR-US: Node mixme @@ -272362,10 +272402,10 @@ CVE-2018-14521 (An issue was discovered in aubio 0.4.6. A SEGV signal can occur [stretch] - aubio <no-dsa> (Minor issue) [jessie] - aubio <no-dsa> (Minor issue) NOTE: https://github.com/aubio/aubio/issues/187 -CVE-2018-14520 - RESERVED -CVE-2018-14519 - RESERVED +CVE-2018-14520 (An issue was discovered in Kirby 2.5.12. The application allows malici ...) + TODO: check +CVE-2018-14519 (An issue was discovered in Kirby 2.5.12. The delete page functionality ...) + TODO: check CVE-2018-14518 RESERVED CVE-2018-14517 (SeaCMS 6.61 has two XSS issues in the admin_config.php file via certai ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/80fe4f5cce84faa5a9f78aa22cd77bac3e35b9de -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/80fe4f5cce84faa5a9f78aa22cd77bac3e35b9de You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits