Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2e15bee4 by Salvatore Bonaccorso at 2019-11-19T20:00:25Z
Process more NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -246,7 +246,7 @@ CVE-2019-19012 (An integer overflow in the search_in_range
function in regexec.c
- libonig <unfixed> (bug #944959)
NOTE: https://github.com/kkos/oniguruma/issues/164
CVE-2019-19011 (MiniUPnP ngiflib 0.4 has a NULL pointer dereference in
GifIndexToTrueC ...)
- TODO: check
+ NOT-FOR-US: ngiflib
CVE-2019-19010 (Eval injection in the Math plugin of Limnoria (before
2019.11.09) and ...)
- limnoria 2019.11.09-1
[buster] - limnoria <no-dsa> (Minor issue, can be fixed via point
release)
@@ -27405,7 +27405,7 @@ CVE-2019-10766
CVE-2019-10765
RESERVED
CVE-2019-10764 (In elliptic-php versions priot to 1.0.6, Timing attacks might
be possi ...)
- TODO: check
+ NOT-FOR-US: elliptic-php
CVE-2019-10763 (pimcore/pimcore before 6.3.0 is vulnerable to SQL Injection.
An attack ...)
NOT-FOR-US: Pimcore
CVE-2019-10762 (columnQuote in medoo before 1.7.5 allows remote attackers to
perform a ...)
@@ -40860,7 +40860,7 @@ CVE-2018-20689
CVE-2018-20688
RESERVED
CVE-2018-20687 (An XML external entity (XXE) vulnerability in
CommandCenterWebServices ...)
- TODO: check
+ NOT-FOR-US: Raritan CommandCenter Secure Gateway
CVE-2018-20686
RESERVED
CVE-2018-20684 (In WinSCP before 5.14 beta, due to missing validation, the scp
impleme ...)
@@ -42057,7 +42057,7 @@ CVE-2019-5690 (NVIDIA Windows GPU Display Driver, all
versions, contains a vulne
CVE-2019-5689 (NVIDIA GeForce Experience, all versions prior to 3.20.1,
contains a vu ...)
NOT-FOR-US: NVIDIA GeForce Experience
CVE-2019-5688 (NVIDIA NVFlash, NVUFlash Tool prior to v5.588.0 and
GPUModeSwitch Tool ...)
- TODO: check
+ NOT-FOR-US: NVIDIA
CVE-2019-5687 (NVIDIA Windows GPU Display Driver (all versions) contains a
vulnerabil ...)
NOT-FOR-US: NVIDIA Windows driver
CVE-2019-5686 (NVIDIA Windows GPU Display Driver (all versions) contains a
vulnerabil ...)
@@ -43343,9 +43343,9 @@ CVE-2019-5104
CVE-2019-5103
RESERVED
CVE-2019-5102 (An exploitable information leak vulnerability exists in the
ustream-ss ...)
- TODO: check
+ NOT-FOR-US: ustream-ssl library of OpenWrt
CVE-2019-5101 (An exploitable information leak vulnerability exists in the
ustream-ss ...)
- TODO: check
+ NOT-FOR-US: ustream-ssl library of OpenWrt
CVE-2019-5100 (An exploitable integer overflow vulnerability exists in the BMP
header ...)
NOT-FOR-US: LEADTOOLS
CVE-2019-5099 (An exploitable integer underflow vulnerability exists in the
CMP-parsi ...)
@@ -74105,7 +74105,7 @@ CVE-2018-13258 (Mediawiki 1.31 before 1.31.1 misses
.htaccess files in the provi
NOTE:
https://lists.wikimedia.org/pipermail/wikitech-l/2018-September/090849.html
NOTE: https://phabricator.wikimedia.org/T199029
CVE-2018-13257 (The bb-auth-provider-cas authentication module within
Blackboard Learn ...)
- TODO: check
+ NOT-FOR-US: Blackboard Learn
CVE-2018-13256 (PHP Scripts Mall Auditor Website 2.0.1 has XSS via the
lastname or fir ...)
NOT-FOR-US: PHP Scripts Mall Auditor Website
CVE-2018-13255
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/2e15bee4ea19e7991bc7aff543f9d748e28bfd5a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/2e15bee4ea19e7991bc7aff543f9d748e28bfd5a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
