summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorsecurity tracker role <sectracker@soriano.debian.org>2020-03-02 08:10:13 +0000
committersecurity tracker role <sectracker@soriano.debian.org>2020-03-02 08:10:13 +0000
commit283adbb42dd88d2d00bcffc4c3767a77eb34e89c (patch)
tree6f1528e9926e92ce0c50e71040e65682c8b6c6d9
parent31274078ac173fe3d6c1ec14c800e3911a8917c4 (diff)
automatic update
Diffstat
-rw-r--r--data/CVE/2013.list2
-rw-r--r--data/CVE/2014.list1
-rw-r--r--data/CVE/2018.list1
-rw-r--r--data/CVE/2019.list5
-rw-r--r--data/CVE/2020.list178
5 files changed, 163 insertions, 24 deletions
diff --git a/data/CVE/2013.list b/data/CVE/2013.list
index 0f715c5ea5..ca542c4551 100644
--- a/data/CVE/2013.list
+++ b/data/CVE/2013.list
@@ -1,3 +1,5 @@
+CVE-2013-7487
+ RESERVED
CVE-2013-7486 (Cross-site scripting (XSS) vulnerability in the backend in Open-Xchang ...)
NOT-FOR-US: Open-Xchange App Suite
CVE-2013-7485 (Cross-site scripting (XSS) vulnerability in the backend in Open-Xchang ...)
diff --git a/data/CVE/2014.list b/data/CVE/2014.list
index 5f0b221a0e..9a155c969c 100644
--- a/data/CVE/2014.list
+++ b/data/CVE/2014.list
@@ -11130,6 +11130,7 @@ CVE-2014-6264
CVE-2014-6263
RESERVED
CVE-2014-6262 (Multiple format string vulnerabilities in the python module in RRDtool ...)
+ {DLA-2131-1}
- rrdtool 1.5.4-1
NOTE: https://github.com/oetiker/rrdtool-1.x/pull/532
NOTE: https://github.com/oetiker/rrdtool-1.x/commit/64ed5314af1255ab6dded45f70b39cdeab5ae2ec (v1.5.0-rc1)
diff --git a/data/CVE/2018.list b/data/CVE/2018.list
index 05574836b2..0792899b19 100644
--- a/data/CVE/2018.list
+++ b/data/CVE/2018.list
@@ -2944,6 +2944,7 @@ CVE-2018-20075
CVE-2018-20074
RESERVED
CVE-2018-20073 (Use of extended attributes in downloads in Google Chrome prior to 72.0 ...)
+ {DSA-4395-1}
- chromium 72.0.3626.81-1 (low)
CVE-2018-20072
RESERVED
diff --git a/data/CVE/2019.list b/data/CVE/2019.list
index fdb43a890e..218caea23c 100644
--- a/data/CVE/2019.list
+++ b/data/CVE/2019.list
@@ -1,3 +1,5 @@
+CVE-2019-20485
+ RESERVED
CVE-2019-20484
RESERVED
CVE-2019-20483
@@ -8609,8 +8611,7 @@ CVE-2019-17028
REJECTED
CVE-2019-17027
REJECTED
-CVE-2019-17026
- RESERVED
+CVE-2019-17026 (Incorrect alias information in IonMonkey JIT compiler for setting arra ...)
{DSA-4603-1 DSA-4600-1 DLA-2093-1 DLA-2071-1}
- firefox 72.0.1-1 (bug #948452)
- firefox-esr 68.4.1esr-1
diff --git a/data/CVE/2020.list b/data/CVE/2020.list
index 6cec65f47c..eeb67606a5 100644
--- a/data/CVE/2020.list
+++ b/data/CVE/2020.list
@@ -1,3 +1,147 @@
+CVE-2020-9550
+ RESERVED
+CVE-2020-9549 (In PDFResurrect 0.12 through 0.19, get_type in pdf.c has an out-of-bou ...)
+ TODO: check
+CVE-2020-9548 (FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interact ...)
+ TODO: check
+CVE-2020-9547 (FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interact ...)
+ TODO: check
+CVE-2020-9546 (FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interact ...)
+ TODO: check
+CVE-2020-9545 (Pale Moon 28.8.x before 28.8.4 has a segmentation fault related to mod ...)
+ TODO: check
+CVE-2020-9544
+ RESERVED
+CVE-2020-9543
+ RESERVED
+CVE-2020-9542
+ RESERVED
+CVE-2020-9541
+ RESERVED
+CVE-2020-9540 (Sophos HitmanPro.Alert before build 861 allows local elevation of priv ...)
+ TODO: check
+CVE-2020-9539
+ RESERVED
+CVE-2020-9538
+ RESERVED
+CVE-2020-9537
+ RESERVED
+CVE-2020-9536
+ RESERVED
+CVE-2020-9535 (fmwlan.c on D-Link DIR-615Jx10 devices has a stack-based buffer overfl ...)
+ TODO: check
+CVE-2020-9534 (fmwlan.c on D-Link DIR-615Jx10 devices has a stack-based buffer overfl ...)
+ TODO: check
+CVE-2020-9533
+ RESERVED
+CVE-2020-9532
+ RESERVED
+CVE-2020-9531
+ RESERVED
+CVE-2020-9530
+ RESERVED
+CVE-2020-9529
+ RESERVED
+CVE-2020-9528
+ RESERVED
+CVE-2020-9527
+ RESERVED
+CVE-2020-9526
+ RESERVED
+CVE-2020-9525
+ RESERVED
+CVE-2020-9524
+ RESERVED
+CVE-2020-9523
+ RESERVED
+CVE-2020-9522
+ RESERVED
+CVE-2020-9521
+ RESERVED
+CVE-2020-9520
+ RESERVED
+CVE-2020-9519
+ RESERVED
+CVE-2020-9518
+ RESERVED
+CVE-2020-9517
+ RESERVED
+CVE-2020-9516
+ RESERVED
+CVE-2020-9515
+ RESERVED
+CVE-2020-9514
+ RESERVED
+CVE-2020-9513
+ RESERVED
+CVE-2020-9512
+ RESERVED
+CVE-2020-9511
+ RESERVED
+CVE-2020-9510
+ RESERVED
+CVE-2020-9509
+ RESERVED
+CVE-2020-9508
+ RESERVED
+CVE-2020-9507
+ RESERVED
+CVE-2020-9506
+ RESERVED
+CVE-2020-9505
+ RESERVED
+CVE-2020-9504
+ RESERVED
+CVE-2020-9503
+ RESERVED
+CVE-2020-9502
+ RESERVED
+CVE-2020-9501
+ RESERVED
+CVE-2020-9500
+ RESERVED
+CVE-2020-9499
+ RESERVED
+CVE-2020-9498
+ RESERVED
+CVE-2020-9497
+ RESERVED
+CVE-2020-9496
+ RESERVED
+CVE-2020-9495
+ RESERVED
+CVE-2020-9494
+ RESERVED
+CVE-2020-9493
+ RESERVED
+CVE-2020-9492
+ RESERVED
+CVE-2020-9491
+ RESERVED
+CVE-2020-9490
+ RESERVED
+CVE-2020-9489
+ RESERVED
+CVE-2020-9488
+ RESERVED
+CVE-2020-9487
+ RESERVED
+CVE-2020-9486
+ RESERVED
+CVE-2020-9485
+ RESERVED
+CVE-2020-9484
+ RESERVED
+CVE-2020-9483
+ RESERVED
+CVE-2020-9482
+ RESERVED
+CVE-2020-9481
+ RESERVED
+CVE-2020-9480
+ RESERVED
+CVE-2020-9479
+ RESERVED
CVE-2020-9478
RESERVED
CVE-2020-9477
@@ -5737,12 +5881,10 @@ CVE-2020-6804 (A reflected XSS vulnerability exists within the gateway, allowing
TODO: check
CVE-2020-6803 (An open redirect is present on the gateway's login page, which could c ...)
TODO: check
-CVE-2020-6801
- RESERVED
+CVE-2020-6801 (Mozilla developers reported memory safety bugs present in Firefox 72. ...)
- firefox 73.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-05/#CVE-2020-6801
-CVE-2020-6800
- RESERVED
+CVE-2020-6800 (Mozilla developers and community members reported memory safety bugs p ...)
{DSA-4625-1 DSA-4620-1 DLA-2104-1 DLA-2102-1}
- firefox 73.0-1
- firefox-esr 68.5.0esr-1
@@ -5750,14 +5892,12 @@ CVE-2020-6800
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-05/#CVE-2020-6800
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-06/#CVE-2020-6800
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/#CVE-2020-6800
-CVE-2020-6799
- RESERVED
+CVE-2020-6799 (Command line arguments could have been injected during Firefox invocat ...)
- firefox <not-affected> (Only affects Windows)
- firefox-esr <not-affected> (Only affects Windows)
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-05/#CVE-2020-6799
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-06/#CVE-2020-6799
-CVE-2020-6798
- RESERVED
+CVE-2020-6798 (If a template tag was used in a select tag, the parser could be confus ...)
{DSA-4625-1 DSA-4620-1 DLA-2104-1 DLA-2102-1}
- firefox 73.0-1
- firefox-esr 68.5.0esr-1
@@ -5765,38 +5905,32 @@ CVE-2020-6798
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-05/#CVE-2020-6798
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-06/#CVE-2020-6798
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/#CVE-2020-6798
-CVE-2020-6797
- RESERVED
+CVE-2020-6797 (By downloading a file with the .fileloc extension, a semi-privileged e ...)
- firefox <not-affected> (Only affects Mac OSX)
- firefox-esr <not-affected> (Only affects Mac OSX)
- thunderbird <not-affected> (Only affects Mac OSX)
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-05/#CVE-2020-6797
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-06/#CVE-2020-6797
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/#CVE-2020-6797
-CVE-2020-6796
- RESERVED
+CVE-2020-6796 (A content process could have modified shared memory relating to crash ...)
{DSA-4620-1 DLA-2102-1}
- firefox 73.0-1
- firefox-esr 68.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-05/#CVE-2020-6796
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-06/#CVE-2020-6796
-CVE-2020-6795
- RESERVED
+CVE-2020-6795 (When processing a message that contains multiple S/MIME signatures, a ...)
{DSA-4625-1 DLA-2104-1}
- thunderbird 1:68.5.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/#CVE-2020-6795
-CVE-2020-6794
- RESERVED
+CVE-2020-6794 (If a user saved passwords before Thunderbird 60 and then later set a m ...)
{DSA-4625-1 DLA-2104-1}
- thunderbird 1:68.5.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/#CVE-2020-6794
-CVE-2020-6793
- RESERVED
+CVE-2020-6793 (When processing an email message with an ill-formed envelope, Thunderb ...)
{DSA-4625-1 DLA-2104-1}
- thunderbird 1:68.5.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/#CVE-2020-6793
-CVE-2020-6792
- RESERVED
+CVE-2020-6792 (When deriving an identifier for an email message, uninitialized memory ...)
{DSA-4625-1 DLA-2104-1}
- thunderbird 1:68.5.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/#CVE-2020-6792
@@ -8393,8 +8527,8 @@ CVE-2020-5541
RESERVED
CVE-2020-5540
RESERVED
-CVE-2020-5539
- RESERVED
+CVE-2020-5539 (GRANDIT Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0 do no ...)
+ TODO: check
CVE-2020-5538
RESERVED
CVE-2020-5537

© 2014-2024 Faster IT GmbH | imprint | privacy policy