Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d912ac05 by Salvatore Bonaccorso at 2019-07-03T20:23:52Z
Cleanup some doubled indentations
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -17085,7 +17085,7 @@ CVE-2019-6765 (This vulnerability allows remote
attackers to execute arbitrary c
CVE-2019-6764 (This vulnerability allows remote attackers to execute arbitrary
code o ...)
NOT-FOR-US: Foxit Reader
CVE-2019-6763 (This vulnerability allows remote attackers to execute arbitrary
code o ...)
- NOT-FOR-US: Foxit Reader
+ NOT-FOR-US: Foxit Reader
CVE-2019-6762 (This vulnerability allows remote attackers to execute arbitrary
code o ...)
NOT-FOR-US: Foxit PhantomPDF
CVE-2019-6761 (This vulnerability allows remote attackers to execute arbitrary
code o ...)
@@ -29826,7 +29826,7 @@ CVE-2018-20024 (LibVNC before commit
4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7 co
{DSA-4383-1 DLA-1617-1}
- libvncserver 0.9.11+dfsg-1.2 (bug #916941)
NOTE: https://github.com/LibVNC/libvncserver/issues/254
- NOTE:
https://github.com/LibVNC/libvncserver/commit/4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7
+ NOTE:
https://github.com/LibVNC/libvncserver/commit/4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7
NOTE:
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-034-libvnc-null-pointer-dereference/
CVE-2018-20023 (LibVNC before 8b06f835e259652b0ff026898014fc7297ade858
contains CWE-66 ...)
{DSA-4383-1 DLA-1617-1}
@@ -31701,7 +31701,7 @@ CVE-2018-19665 (The Bluetooth subsystem in QEMU
mishandles negative values for l
NOTE: note that previously mentioned patch will never be merged by
upstream, see
NOTE: https://lists.debian.org/debian-lts/2019/01/msg00073.html
NOTE: 3.1 marked bluetooth subsystem as unused/deprecated, will most
likely be removed:
- NOTE: https://github.com/qemu/qemu/commit/c0188e69d
+ NOTE: https://github.com/qemu/qemu/commit/c0188e69d
CVE-2018-19664 (libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the
put_pixel ...)
- libjpeg-turbo <not-affected> (Vulnerable code introduced later)
NOTE: https://github.com/libjpeg-turbo/libjpeg-turbo/issues/305
@@ -39095,7 +39095,7 @@ CVE-2018-18073 (Artifex Ghostscript allows attackers to
bypass a sandbox protect
CVE-2018-18072
RESERVED
CVE-2018-18071 (An issue was discovered in the Daimler Mercedes-Benz Me app
2.11.0-846 ...)
- NOT-FOR-US: Daimler Mercedes-Benz Me app for iOS
+ NOT-FOR-US: Daimler Mercedes-Benz Me app for iOS
CVE-2018-18070 (An issue was discovered in Daimler Mercedes-Benz COMAND
17/13.0 50.12 ...)
NOT-FOR-US: Daimler Mercedes-Benz COMAND on Mercedes-Benz C-Class 2018
vehicles
CVE-2018-18069 (process_forms in the WPML (aka sitepress-multilingual-cms)
plugin thro ...)
@@ -42764,15 +42764,15 @@ CVE-2018-16669 (An issue was discovered in CIRCONTROL
Open Charge Point Protocol
CVE-2018-16668 (An issue was discovered in CIRCONTROL CirCarLife before 4.3.
There is ...)
NOT-FOR-US: CIRCONTROL CirCarLife
CVE-2018-16667 (An issue was discovered in Contiki-NG through 4.1. There is a
buffer o ...)
- NOT-FOR-US: Contiki Operating System
+ NOT-FOR-US: Contiki Operating System
CVE-2018-16666 (An issue was discovered in Contiki-NG through 4.1. There is a
stack-ba ...)
- NOT-FOR-US: Contiki Operating System
+ NOT-FOR-US: Contiki Operating System
CVE-2018-16665 (An issue was discovered in Contiki-NG through 4.1. There is a
buffer o ...)
- NOT-FOR-US: Contiki Operating System
+ NOT-FOR-US: Contiki Operating System
CVE-2018-16664 (An issue was discovered in Contiki-NG through 4.1. There is a
buffer o ...)
- NOT-FOR-US: Contiki Operating System
+ NOT-FOR-US: Contiki Operating System
CVE-2018-16663 (An issue was discovered in Contiki-NG through 4.1. There is a
stack-ba ...)
- NOT-FOR-US: Contiki Operating System
+ NOT-FOR-US: Contiki Operating System
CVE-2018-16662
RESERVED
CVE-2018-16661
@@ -45748,9 +45748,9 @@ CVE-2018-15545
CVE-2018-15544
RESERVED
CVE-2018-15543 (** DISPUTED ** An issue was discovered in the
org.telegram.messenger a ...)
- NOT-FOR-US: org.telegram.messenger for Android
+ NOT-FOR-US: org.telegram.messenger for Android
CVE-2018-15542 (** DISPUTED ** An issue was discovered in the
org.telegram.messenger a ...)
- NOT-FOR-US: org.telegram.messenger for Android
+ NOT-FOR-US: org.telegram.messenger for Android
CVE-2018-15541
RESERVED
CVE-2018-15540 (Agentejo Cockpit performs actions on files without appropriate
validat ...)
@@ -48621,7 +48621,7 @@ CVE-2018-14432 (In the Federation component of
OpenStack Keystone before 11.0.4,
CVE-2018-14431
RESERVED
CVE-2018-14430 (The Mondula Multi Step Form plugin through 1.2.5 for WordPress
allows ...)
- NOT-FOR-US: Mondula Multi Step Form plugin for WordPress
+ NOT-FOR-US: Mondula Multi Step Form plugin for WordPress
CVE-2018-14429 (man-cgi before 1.16 allows Local File Inclusion via absolute
path trav ...)
NOT-FOR-US: man-cgi
CVE-2018-14428
@@ -58823,7 +58823,7 @@ CVE-2018-10688
CVE-2018-10687
RESERVED
CVE-2018-10686 (An issue was discovered in Vesta Control Panel 0.9.8-20. There
is Refl ...)
- NOT-FOR-US: Vesta Control Panel
+ NOT-FOR-US: Vesta Control Panel
CVE-2018-10685 (In Long Range Zip (aka lrzip) 0.631, there is a use-after-free
in the ...)
- lrzip 0.631+git180517-1 (low; bug #897645)
[stretch] - lrzip <no-dsa> (Minor issue)
@@ -64146,11 +64146,11 @@ CVE-2018-8641 (An elevation of privilege
vulnerability exists in Windows when th
CVE-2018-8640
RESERVED
CVE-2018-8639 (An elevation of privilege vulnerability exists in Windows when
the Win ...)
- NOT-FOR-US: Microsoft Windows
+ NOT-FOR-US: Microsoft Windows
CVE-2018-8638 (An information disclosure vulnerability exists when DirectX
improperly ...)
- NOT-FOR-US: Microsoft Windows
+ NOT-FOR-US: Microsoft Windows
CVE-2018-8637 (An information disclosure vulnerability exists in Windows
kernel that ...)
- NOT-FOR-US: Microsoft Windows
+ NOT-FOR-US: Microsoft Windows
CVE-2018-8636 (A remote code execution vulnerability exists in Microsoft Excel
softwa ...)
NOT-FOR-US: Microsoft
CVE-2018-8635 (An elevation of privilege vulnerability exists when Microsoft
SharePoi ...)
@@ -92284,7 +92284,7 @@ CVE-2017-16207 (discordi.js is a malicious module based
on the discord.js librar
CVE-2017-16206 (The cofee-script module exfiltrates sensitive data such as a
user's pr ...)
NOT-FOR-US: cofee-script
CVE-2017-16205 (The coffescript module exfiltrates sensitive data such as a
user's pri ...)
- NOT-FOR-US: coffescript
+ NOT-FOR-US: coffescript
CVE-2017-16204 (The jquey module exfiltrates sensitive data such as a user's
private S ...)
NOT-FOR-US: jquey
CVE-2017-16203 (The coffe-script module exfiltrates sensitive data such as a
user's pr ...)
@@ -195417,7 +195417,7 @@ CVE-2014-9565 (Cross-site request forgery (CSRF)
vulnerability in IBM Flex Syste
CVE-2014-9564 (CRLF injection vulnerability in IBM Flex System EN6131 40Gb
Ethernet a ...)
NOT-FOR-US: IBM
CVE-2014-9563 (CRLF injection vulnerability in the web-based management (WBM)
interfa ...)
- NOT-FOR-US: Unify (former Siemens) OpenStage SIP and OpenScape Desk
Phone
+ NOT-FOR-US: Unify (former Siemens) OpenStage SIP and OpenScape Desk
Phone
CVE-2014-9562 (Cross-site scripting (XSS) vulnerability in display_dialog.php
in M2 O ...)
NOT-FOR-US: M2 OptimalSite
CVE-2014-9561 (Cross-site scripting (XSS) vulnerability in
redir_last_post_list.php i ...)
@@ -200185,9 +200185,9 @@ CVE-2014-8424 (ARRIS VAP2500 before FW08.41 does not
properly validate passwords
CVE-2014-8423 (Unspecified vulnerability in the management portal in ARRIS
VAP2500 be ...)
NOT-FOR-US: ARRIS VAP2500
CVE-2014-8422 (The web-based management (WBM) interface in Unify (former
Siemens) Ope ...)
- NOT-FOR-US: Unify (former Siemens) OpenStage SIP and OpenScape Desk
Phone
+ NOT-FOR-US: Unify (former Siemens) OpenStage SIP and OpenScape Desk
Phone
CVE-2014-8421 (Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone
IP V3 de ...)
- NOT-FOR-US: Unify (former Siemens) OpenStage SIP and OpenScape Desk
Phone
+ NOT-FOR-US: Unify (former Siemens) OpenStage SIP and OpenScape Desk
Phone
CVE-2014-8420 (The ViewPoint web application in Dell SonicWALL Global
Management Syst ...)
NOT-FOR-US: Dell SonicWALL
CVE-2014-8419 (Wibu-Systems CodeMeter Runtime before 5.20 uses weak
permissions (read ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/d912ac05e060b6a7781f276d2236ce5d44d88b3c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/d912ac05e060b6a7781f276d2236ce5d44d88b3c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
