Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1c9417db by Moritz Muehlenhoff at 2019-10-07T08:53:05Z
new issues in soup, liblnk, jackson-databind
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3,19 +3,26 @@ CVE-2019-17271
CVE-2019-17270
RESERVED
CVE-2019-17269 (Intellian Remote Access 3.18 allows remote attackers to
execute arbitr ...)
- TODO: check
+ NOT-FOR-US: Intellian Remote Access
CVE-2019-17268
RESERVED
CVE-2019-17267 (A Polymorphic Typing issue was discovered in FasterXML
jackson-databin ...)
- TODO: check
+ - jackson-databind 2.10.0-1
+ NOTE: https://github.com/FasterXML/jackson-databind/issues/2460
+ NOTE:
https://github.com/FasterXML/jackson-databind/commit/191a4cdf87b56d2ddddb77edd895ee756b7f75eb
CVE-2019-17266 (libsoup through 2.68.1 has a heap-based buffer over-read
because soup_ ...)
- TODO: check
+ - libsoup2.4 <unfixed>
+ NOTE: https://gitlab.gnome.org/GNOME/libsoup/issues/173
CVE-2019-17265
RESERVED
CVE-2019-17264 (In libyal liblnk before 20191006,
liblnk_location_information_read_dat ...)
- TODO: check
+ - liblnk <unfixed> (low)
+ [buster] - liblnk <no-dsa> (Minor issue)
+ [stretch] - liblnk <no-dsa> (Minor issue)
CVE-2019-17263 (In libyal libfwsi before 20191006,
libfwsi_extension_block_copy_from_b ...)
- TODO: check
+ - liblnk <unfixed> (low)
+ [buster] - liblnk <no-dsa> (Minor issue)
+ [stretch] - liblnk <no-dsa> (Minor issue)
CVE-2019-17262
RESERVED
CVE-2019-17261
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/1c9417dbd01cb0ab1374128a38aef8b8c995f967
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/1c9417dbd01cb0ab1374128a38aef8b8c995f967
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
