diff options
author | security tracker role <sectracker@soriano.debian.org> | 2021-01-04 08:10:14 +0000 |
---|---|---|
committer | security tracker role <sectracker@soriano.debian.org> | 2021-01-04 08:10:14 +0000 |
commit | d5bf7ba942dbe5e3d5b4f3a89fc0dd0f29a0b406 (patch) | |
tree | 8afb7f5760ab182b43a87e360f0b20cfac48ff5c | |
parent | 6a8be16c0efd684aa918625d2ad82c1884c22c83 (diff) |
automatic update
-rw-r--r-- | data/CVE/2017.list | 1 | ||||
-rw-r--r-- | data/CVE/2020.list | 8 | ||||
-rw-r--r-- | data/CVE/2021.list | 6 |
3 files changed, 13 insertions, 2 deletions
diff --git a/data/CVE/2017.list b/data/CVE/2017.list index 12b56e9407..a4e3d2da5d 100644 --- a/data/CVE/2017.list +++ b/data/CVE/2017.list @@ -34914,6 +34914,7 @@ CVE-2017-6890 (A boundary error within the "foveon_load_camf()" function (dcraw_ CVE-2017-6889 (An integer overflow error within the "foveon_load_camf()" function (dc ...) NOT-FOR-US: libraw demosaic extension (not packaged in Debian) CVE-2017-6888 (An error in the "read_metadata_vorbiscomment_()" function (src/libFLAC ...) + {DLA-2514-1} - flac 1.3.2-2 (low; bug #897015) [jessie] - flac <no-dsa> (Minor issue) [wheezy] - flac <no-dsa> (Minor issue) diff --git a/data/CVE/2020.list b/data/CVE/2020.list index 4138f113e4..06b8302916 100644 --- a/data/CVE/2020.list +++ b/data/CVE/2020.list @@ -1,3 +1,5 @@ +CVE-2020-35965 (decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds ...) + TODO: check CVE-2020-35964 (track_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bo ...) - ffmpeg <unfixed> NOTE: https://github.com/FFmpeg/FFmpeg/commit/27a99e2c7d450fef15594671eef4465c8a166bd7 @@ -2688,14 +2690,14 @@ CVE-2020-29363 (An issue was discovered in p11-kit 0.23.6 through 0.23.21. A hea NOTE: https://github.com/p11-glue/p11-kit/commit/2617f3ef888e103324a28811886b99ed0a56346d (0.23.22) NOTE: Introduced in https://github.com/p11-glue/p11-kit/commit/ba49b85ecf280e7fb6eec96c3ef33c50122e75a6 (0.23.6) CVE-2020-29362 (An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-base ...) - {DSA-4822-1} + {DSA-4822-1 DLA-2513-1} - p11-kit 0.23.22-1 NOTE: https://lists.freedesktop.org/archives/p11-glue/2020-December/000712.html NOTE: https://github.com/p11-glue/p11-kit/security/advisories/GHSA-5wpq-43j2-6qwc NOTE: https://github.com/p11-glue/p11-kit/commit/bda2f543ff8e0195c90e849379ef1585d00677bc (0.23.22) NOTE: Introduced in https://github.com/p11-glue/p11-kit/commit/c785ab66890ad7b73c556d6afdf2bb8a32dd50e2 (0.21.1) CVE-2020-29361 (An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple in ...) - {DSA-4822-1} + {DSA-4822-1 DLA-2513-1} - p11-kit 0.23.22-1 NOTE: https://lists.freedesktop.org/archives/p11-glue/2020-December/000712.html NOTE: https://github.com/p11-glue/p11-kit/security/advisories/GHSA-q4r3-hm6m-mvc2 @@ -11265,6 +11267,7 @@ CVE-2020-25639 [NULL pointer dereference via nouveau ioctl can lead to DoS] [stretch] - linux <not-affected> (Vulnerable code introduced later) NOTE: https://lists.freedesktop.org/archives/nouveau/2020-August/036682.html CVE-2020-25638 (A flaw was found in hibernate-core in versions prior to and including ...) + {DLA-2512-1} - libhibernate3-java 3.6.10.Final-11 NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1881353 NOTE: Fixed by https://github.com/hibernate/hibernate-orm/commit/59fede7acaaa1579b561407aefa582311f7ebe78 @@ -68294,6 +68297,7 @@ CVE-2020-0501 (Buffer overflow in Intel(R) Graphics Drivers before version 26.20 CVE-2020-0500 (In startInputUncheckedLocked of InputMethodManager.java, there is a po ...) NOT-FOR-US: Android CVE-2020-0499 (In FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a p ...) + {DLA-2514-1} - flac 1.3.3-2 (bug #977764) [buster] - flac <no-dsa> (Minor issue) NOTE: https://github.com/xiph/flac/commit/2e7931c27eb15e387da440a37f12437e35b22dd4 diff --git a/data/CVE/2021.list b/data/CVE/2021.list index 39e607186f..67726dca54 100644 --- a/data/CVE/2021.list +++ b/data/CVE/2021.list @@ -1,3 +1,9 @@ +CVE-2021-3007 (Zend Framework 3.0.0 has a deserialization vulnerability that can lead ...) + TODO: check +CVE-2021-21495 (MK-AUTH through 19.01 K4.9 allows CSRF for password changes via the ce ...) + TODO: check +CVE-2021-21494 (MK-AUTH through 19.01 K4.9 allows XSS via the admin/logs_ajax.php tipo ...) + TODO: check CVE-2021-3006 (The breed function in the smart contract implementation for Farm in Se ...) NOT-FOR-US: Farm in Seal Finance (Seal) Ethereum token CVE-2021-3005 (MK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive ...) |