automatic update

3 files changed, 13 insertions, 2 deletions

diff --git a/data/CVE/2017.list b/data/CVE/2017.list
index 12b56e9407..a4e3d2da5d 100644
--- a/data/CVE/2017.list
+++ b/data/CVE/2017.list
@@ -34914,6 +34914,7 @@ CVE-2017-6890 (A boundary error within the "foveon_load_camf()" function (dcraw_
 CVE-2017-6889 (An integer overflow error within the "foveon_load_camf()" function (dc ...)
 	NOT-FOR-US: libraw demosaic extension (not packaged in Debian)
 CVE-2017-6888 (An error in the "read_metadata_vorbiscomment_()" function (src/libFLAC ...)
+	{DLA-2514-1}
 	- flac 1.3.2-2 (low; bug #897015)
 	[jessie] - flac <no-dsa> (Minor issue)
 	[wheezy] - flac <no-dsa> (Minor issue)
diff --git a/data/CVE/2020.list b/data/CVE/2020.list
index 4138f113e4..06b8302916 100644
--- a/data/CVE/2020.list
+++ b/data/CVE/2020.list
@@ -1,3 +1,5 @@
+CVE-2020-35965 (decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds  ...)
+	TODO: check
 CVE-2020-35964 (track_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bo ...)
 	- ffmpeg <unfixed>
 	NOTE: https://github.com/FFmpeg/FFmpeg/commit/27a99e2c7d450fef15594671eef4465c8a166bd7
@@ -2688,14 +2690,14 @@ CVE-2020-29363 (An issue was discovered in p11-kit 0.23.6 through 0.23.21. A hea
 	NOTE: https://github.com/p11-glue/p11-kit/commit/2617f3ef888e103324a28811886b99ed0a56346d (0.23.22)
 	NOTE: Introduced in https://github.com/p11-glue/p11-kit/commit/ba49b85ecf280e7fb6eec96c3ef33c50122e75a6 (0.23.6)
 CVE-2020-29362 (An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-base ...)
-	{DSA-4822-1}
+	{DSA-4822-1 DLA-2513-1}
 	- p11-kit 0.23.22-1
 	NOTE: https://lists.freedesktop.org/archives/p11-glue/2020-December/000712.html
 	NOTE: https://github.com/p11-glue/p11-kit/security/advisories/GHSA-5wpq-43j2-6qwc
 	NOTE: https://github.com/p11-glue/p11-kit/commit/bda2f543ff8e0195c90e849379ef1585d00677bc (0.23.22)
 	NOTE: Introduced in https://github.com/p11-glue/p11-kit/commit/c785ab66890ad7b73c556d6afdf2bb8a32dd50e2 (0.21.1)
 CVE-2020-29361 (An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple in ...)
-	{DSA-4822-1}
+	{DSA-4822-1 DLA-2513-1}
 	- p11-kit 0.23.22-1
 	NOTE: https://lists.freedesktop.org/archives/p11-glue/2020-December/000712.html
 	NOTE: https://github.com/p11-glue/p11-kit/security/advisories/GHSA-q4r3-hm6m-mvc2
@@ -11265,6 +11267,7 @@ CVE-2020-25639 [NULL pointer dereference via nouveau ioctl can lead to DoS]
 	[stretch] - linux <not-affected> (Vulnerable code introduced later)
 	NOTE: https://lists.freedesktop.org/archives/nouveau/2020-August/036682.html
 CVE-2020-25638 (A flaw was found in hibernate-core in versions prior to and including  ...)
+	{DLA-2512-1}
 	- libhibernate3-java 3.6.10.Final-11
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1881353
 	NOTE: Fixed by https://github.com/hibernate/hibernate-orm/commit/59fede7acaaa1579b561407aefa582311f7ebe78
@@ -68294,6 +68297,7 @@ CVE-2020-0501 (Buffer overflow in Intel(R) Graphics Drivers before version 26.20
 CVE-2020-0500 (In startInputUncheckedLocked of InputMethodManager.java, there is a po ...)
 	NOT-FOR-US: Android
 CVE-2020-0499 (In FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a p ...)
+	{DLA-2514-1}
 	- flac 1.3.3-2 (bug #977764)
 	[buster] - flac <no-dsa> (Minor issue)
 	NOTE: https://github.com/xiph/flac/commit/2e7931c27eb15e387da440a37f12437e35b22dd4
diff --git a/data/CVE/2021.list b/data/CVE/2021.list
index 39e607186f..67726dca54 100644
--- a/data/CVE/2021.list
+++ b/data/CVE/2021.list
@@ -1,3 +1,9 @@
+CVE-2021-3007 (Zend Framework 3.0.0 has a deserialization vulnerability that can lead ...)
+	TODO: check
+CVE-2021-21495 (MK-AUTH through 19.01 K4.9 allows CSRF for password changes via the ce ...)
+	TODO: check
+CVE-2021-21494 (MK-AUTH through 19.01 K4.9 allows XSS via the admin/logs_ajax.php tipo ...)
+	TODO: check
 CVE-2021-3006 (The breed function in the smart contract implementation for Farm in Se ...)
 	NOT-FOR-US: Farm in Seal Finance (Seal) Ethereum token
 CVE-2021-3005 (MK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive ...)