Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
49a943ed by Salvatore Bonaccorso at 2019-08-07T10:37:03Z
Cleanup some additional spaces
- - - - -
1972fde0 by Salvatore Bonaccorso at 2019-08-07T10:55:28Z
Add Debian bug reference for CVE-2019-10217/ansible
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4775,7 +4775,7 @@ CVE-2019-13377
NOTE:
https://w1.fi/cgit/hostap/commit/?id=70ff850e89fbc8bc7da515321b4d15b5eef70581
NOTE:
https://w1.fi/cgit/hostap/commit/?id=d63edfa90243e9a7de6ae5c275032f2cc79fef95
NOTE: Added in v2.5:
https://w1.fi/cgit/hostap/plain/wpa_supplicant/ChangeLog:
- NOTE: "added support for Brainpool Elliptic Curves with SAE"
+ NOTE: "added support for Brainpool Elliptic Curves with SAE"
CVE-2019-13376
RESERVED
CVE-2019-13375 (A SQL Injection was discovered in D-Link Central WiFi Manager
CWM(100) ...)
@@ -4988,7 +4988,7 @@ CVE-2019-13297 (ImageMagick 7.0.8-50 Q16 has a heap-based
buffer over-read at Ma
CVE-2019-13296 (ImageMagick 7.0.8-50 Q16 has direct memory leaks in
AcquireMagickMemor ...)
- imagemagick <not-affected> (Only affects Imagemagick 7)
NOTE:
https://github.com/ImageMagick/ImageMagick/commit/ce08a3691a8ac29125e29fc41967b3737fa3f425
- NOTE: https://github.com/ImageMagick/ImageMagick/issues/1604
+ NOTE: https://github.com/ImageMagick/ImageMagick/issues/1604
CVE-2019-13295 (ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at
MagickCo ...)
- imagemagick <unfixed> (bug #931457)
NOTE: https://github.com/ImageMagick/ImageMagick/issues/1608
@@ -5169,7 +5169,7 @@ CVE-2019-13225 (A NULL Pointer Dereference in match_at()
in regexec.c in Oniguru
[buster] - libonig <no-dsa> (Minor issue)
[stretch] - libonig <no-dsa> (Minor issue)
[jessie] - libonig <not-affected> (vulnerable code was introduced later)
- NOTE:
https://github.com/kkos/oniguruma/commit/c509265c5f6ae7264f7b8a8aae1cfa5fc59d108c
+ NOTE:
https://github.com/kkos/oniguruma/commit/c509265c5f6ae7264f7b8a8aae1cfa5fc59d108c
CVE-2019-13224 (A use-after-free in onig_new_deluxe() in regext.c in Oniguruma
6.9.2 a ...)
{DLA-1854-1}
- libonig 6.9.2-1 (low; bug #931878)
@@ -12962,7 +12962,7 @@ CVE-2019-10218
RESERVED
CVE-2019-10217
RESERVED
- - ansible <unfixed>
+ - ansible <unfixed> (bug #934128)
NOTE: https://github.com/ansible/ansible/issues/56269
NOTE: https://github.com/ansible/ansible/pull/59427
CVE-2019-10216
@@ -37717,7 +37717,7 @@ CVE-2018-19631
CVE-2018-19630 (cgi_handle_request in uhttpd in OpenWrt through 18.06.1 and
LEDE throu ...)
NOT-FOR-US: uhttpd (in OpenWRT and LEDE)
CVE-2018-19629 (A Denial of Service vulnerability in the ImageNow Server
service in Hy ...)
- NOT-FOR-US: Hyland Perceptive Content Server
+ NOT-FOR-US: Hyland Perceptive Content Server
CVE-2018-19628 (In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could
crash. Thi ...)
{DSA-4359-1}
- wireshark 2.6.5-1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/f4dca48990017963fe64b76cfdd920e2b852ff48...1972fde0ce7249b17d881597c7086d41a22fe705
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/f4dca48990017963fe64b76cfdd920e2b852ff48...1972fde0ce7249b17d881597c7086d41a22fe705
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
