Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
698e2f5c by Moritz Muehlenhoff at 2019-07-25T15:03:20Z
buster/stretch triage
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -25,7 +25,9 @@ CVE-2019-14251
CVE-2019-14250 (An issue was discovered in GNU libiberty, as distributed in
GNU Binuti ...)
TODO: check
CVE-2019-14249 (dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows
attacker ...)
- TODO: check
+ - dwarfutils <unfixed> (low)
+ [buster] - dwarfutils <no-dsa> (Minor issue)
+ [stretch] - dwarfutils <no-dsa> (Minor issue)
CVE-2019-14248 (In libnasm.a in Netwide Assembler (NASM) 2.14.xx, asm/pragma.c
allows ...)
- nasm <unfixed> (unimportant; bug #932907)
NOTE: https://bugzilla.nasm.us/show_bug.cgi?id=3392576
@@ -3474,6 +3476,7 @@ CVE-2019-13139 [command injection due to a missing
validation of the git ref com
RESERVED
[experimental] - docker.io 18.09.5+dfsg1-1
- docker.io <unfixed>
+ [buster] - docker.io <no-dsa> (Minor issue)
NOTE: https://github.com/moby/moby/pull/38944
CVE-2019-13138
RESERVED
@@ -11033,6 +11036,8 @@ CVE-2019-10207 [bluetooth: hci_uart: 0x0 address
execution as nonprivileged use
CVE-2019-10206 [disclosure data when prompted for password and template
characters are passed]
RESERVED
- ansible <unfixed>
+ [buster] - ansible <no-dsa> (Minor issue)
+ [stretch] - ansible <no-dsa> (Minor issue)
NOTE: https://github.com/ansible/ansible/pull/59246
NOTE: 2.8.x https://github.com/ansible/ansible/pull/59552
NOTE: 2.7.x https://github.com/ansible/ansible/pull/59553
@@ -177331,7 +177336,7 @@ CVE-2015-7899 (The com_content component in Joomla!
3.x before 3.4.5 does not pr
CVE-2015-7883
RESERVED
CVE-2015-7882 (Improper handling of LDAP authentication in MongoDB Server
versions 3. ...)
- TODO: check
+ - mongodb <not-affected> (Only affects Enterprise version)
CVE-2015-7881 (The Colorbox module 7.x-2.x before 7.x-2.10 for Drupal allows
remote a ...)
NOT-FOR-US: Colorbox module for Drupal
CVE-2015-7880 (The Entity Registration module 7.x-1.x before 7.x-1.5 for
Drupal allow ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/698e2f5c1d202f43b5c8ced35b1df0efd7b9ecbc
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/698e2f5c1d202f43b5c8ced35b1df0efd7b9ecbc
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
