Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d6638748 by security tracker role at 2020-01-20T20:10:24+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,5 @@
+CVE-2019-20382
+ RESERVED
CVE-2020-7238
RESERVED
CVE-2020-7237 (Cacti 1.2.8 allows Remote Code Execution (by privileged users)
via she ...)
@@ -1855,14 +1857,18 @@ CVE-2020-6381
RESERVED
CVE-2020-6380
RESERVED
+ {DSA-4606-1}
- chromium 79.0.3945.130-1
CVE-2020-6379
RESERVED
+ {DSA-4606-1}
- chromium 79.0.3945.130-1
CVE-2020-6378
RESERVED
+ {DSA-4606-1}
- chromium 79.0.3945.130-1
CVE-2020-6377 (Use after free in audio in Google Chrome prior to 79.0.3945.117
allowe ...)
+ {DSA-4606-1}
- chromium 79.0.3945.130-1
CVE-2020-6376
RESERVED
@@ -4637,6 +4643,7 @@ CVE-2019-20210 (The CTHthemes CityBook before 2.3.4,
TownHub before 1.0.6, and E
CVE-2019-20209 (The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and
EasyBoo ...)
NOT-FOR-US: themes for WordPress
CVE-2019-20208 (dimC_Read in isomedia/box_code_3gpp.c in GPAC 0.8.0 has a
stack-based ...)
+ {DLA-2072-1}
- gpac <unfixed>
[buster] - gpac <no-dsa> (Minor issue)
[stretch] - gpac <no-dsa> (Minor issue)
@@ -4833,11 +4840,13 @@ CVE-2019-20173
CVE-2019-20172 (Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30
does not r ...)
NOT-FOR-US: SerenityOS
CVE-2019-20171 (An issue was discovered in GPAC version 0.8.0 and
0.9.0-development-20 ...)
+ {DLA-2072-1}
- gpac <unfixed>
NOTE: https://github.com/gpac/gpac/issues/1337
NOTE:
https://github.com/gpac/gpac/commit/72cdc5048dead86bb1df7d21e0b9975e49cf2d97
NOTE:
https://github.com/gpac/gpac/commit/2bcca3f1d4605100bb27d3ed7be25b53cddbc75c
CVE-2019-20170 (An issue was discovered in GPAC version 0.8.0 and
0.9.0-development-20 ...)
+ {DLA-2072-1}
- gpac <unfixed>
NOTE: https://github.com/gpac/gpac/issues/1328
NOTE:
https://github.com/gpac/gpac/commit/16856430287cc10f495eb241910b4dc45b193e03
@@ -4861,6 +4870,7 @@ CVE-2019-20166 (An issue was discovered in GPAC version
0.8.0 and 0.9.0-developm
NOTE: https://github.com/gpac/gpac/issues/1331
NOTE:
https://github.com/gpac/gpac/commit/5250afecbc770c8f26829e9566d5b226a3c5fa80
(chunk #2)
CVE-2019-20165 (An issue was discovered in GPAC version 0.8.0 and
0.9.0-development-20 ...)
+ {DLA-2072-1}
- gpac <unfixed>
NOTE: https://github.com/gpac/gpac/issues/1338
NOTE:
https://github.com/gpac/gpac/commit/5250afecbc770c8f26829e9566d5b226a3c5fa80
(chunk #1)
@@ -4869,14 +4879,17 @@ CVE-2019-20164 (An issue was discovered in GPAC version
0.8.0 and 0.9.0-developm
NOTE: https://github.com/gpac/gpac/issues/1332
NOTE:
https://github.com/gpac/gpac/commit/5250afecbc770c8f26829e9566d5b226a3c5fa80
(chunk #2)
CVE-2019-20163 (An issue was discovered in GPAC version 0.8.0 and
0.9.0-development-20 ...)
+ {DLA-2072-1}
- gpac <unfixed>
NOTE: https://github.com/gpac/gpac/issues/1335
NOTE:
https://github.com/gpac/gpac/commit/5250afecbc770c8f26829e9566d5b226a3c5fa80
(chunk #4)
CVE-2019-20162 (An issue was discovered in GPAC version 0.8.0 and
0.9.0-development-20 ...)
+ {DLA-2072-1}
- gpac <unfixed>
NOTE: https://github.com/gpac/gpac/issues/1327
NOTE:
https://github.com/gpac/gpac/commit/3c0ba42546c8148c51169c3908e845c308746c77
CVE-2019-20161 (An issue was discovered in GPAC version 0.8.0 and
0.9.0-development-20 ...)
+ {DLA-2072-1}
- gpac <unfixed>
NOTE: https://github.com/gpac/gpac/issues/1320
NOTE:
https://github.com/gpac/gpac/commit/7a09732d4978586e6284e84caa9c301b2fa5e956
@@ -23058,7 +23071,7 @@ CVE-2019-17027
RESERVED
CVE-2019-17026
RESERVED
- {DSA-4603-1 DSA-4600-1 DLA-2061-1}
+ {DSA-4603-1 DSA-4600-1 DLA-2071-1 DLA-2061-1}
- firefox 72.0.1-1 (bug #948452)
- firefox-esr 68.4.1esr-1
- thunderbird 1:68.4.1-1
@@ -23068,7 +23081,7 @@ CVE-2019-17025 (Mozilla developers reported memory
safety bugs present in Firefo
- firefox 72.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2020-01/#CVE-2019-17025
CVE-2019-17024 (Mozilla developers reported memory safety bugs present in
Firefox 71 a ...)
- {DSA-4603-1 DSA-4600-1 DLA-2061-1}
+ {DSA-4603-1 DSA-4600-1 DLA-2071-1 DLA-2061-1}
- firefox 72.0-1
- firefox-esr 68.4.0esr-1
- thunderbird 1:68.4.1-1
@@ -23082,7 +23095,7 @@ CVE-2019-17023 (After a HelloRetryRequest has been
sent, the client may negotiat
NOTE:
https://hg.mozilla.org/projects/nss/rev/d64102b76a437f24d98a20480dcc9f1655143e7c
NOTE:
https://hg.mozilla.org/projects/nss/rev/8a2bd40e7f89a796cf24a0ff7cfb67c6e69c5c78
CVE-2019-17022 (When pasting a &lt;style&gt; tag from the clipboard
into a ric ...)
- {DSA-4603-1 DSA-4600-1 DLA-2061-1}
+ {DSA-4603-1 DSA-4600-1 DLA-2071-1 DLA-2061-1}
- firefox 72.0-1
- firefox-esr 68.4.0esr-1
- thunderbird 1:68.4.1-1
@@ -23106,7 +23119,7 @@ CVE-2019-17018 (When in Private Browsing Mode on
Windows 10, the Windows keyboar
- firefox <not-affected> (Windows-specific)
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2020-01/#CVE-2019-17018
CVE-2019-17017 (Due to a missing case handling object types, a type confusion
vulnerab ...)
- {DSA-4603-1 DSA-4600-1 DLA-2061-1}
+ {DSA-4603-1 DSA-4600-1 DLA-2071-1 DLA-2061-1}
- firefox 72.0-1
- firefox-esr 68.4.0esr-1
- thunderbird 1:68.4.1-1
@@ -23114,7 +23127,7 @@ CVE-2019-17017 (Due to a missing case handling object
types, a type confusion vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2020-02/#CVE-2019-17017
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2020-04/#CVE-2019-17017
CVE-2019-17016 (When pasting a &lt;style&gt; tag from the clipboard
into a ric ...)
- {DSA-4603-1 DSA-4600-1 DLA-2061-1}
+ {DSA-4603-1 DSA-4600-1 DLA-2071-1 DLA-2061-1}
- firefox 72.0-1
- firefox-esr 68.4.0esr-1
- thunderbird 1:68.4.1-1
@@ -24985,12 +24998,14 @@ CVE-2018-21017 (GPAC 0.7.1 has a memory leak in
dinf_Read in isomedia/box_code_b
NOTE: Introduced in
https://github.com/gpac/gpac/commit/6cfd65819add78426d9635e3f8358f8bc149b645
(v0.6.0)
NOTE: Fixed by:
https://github.com/gpac/gpac/commit/d2371b4b204f0a3c0af51ad4e9b491144dd1225c
(v0.8.)
CVE-2018-21016 (audio_sample_entry_AddBox() at isomedia/box_code_base.c in
GPAC 0.7.1 ...)
+ {DLA-2072-1}
- gpac <unfixed> (bug #940882)
[buster] - gpac <no-dsa> (Minor issue)
[stretch] - gpac <no-dsa> (Minor issue)
NOTE: https://github.com/gpac/gpac/issues/1180
NOTE:
https://github.com/gpac/gpac/commit/ea13945f3c2dc2c21e30e2731bf2782384307a13
CVE-2018-21015 (AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1
allows remot ...)
+ {DLA-2072-1}
- gpac <unfixed> (bug #940882)
[buster] - gpac <no-dsa> (Minor issue)
[stretch] - gpac <no-dsa> (Minor issue)
@@ -33229,6 +33244,7 @@ CVE-2019-13769
CVE-2019-13768
RESERVED
CVE-2019-13767 (Use after free in media picker in Google Chrome prior to
79.0.3945.88 ...)
+ {DSA-4606-1}
- chromium 79.0.3945.130-1
CVE-2019-13766 (Use-after-free in accessibility in Google Chrome prior to
77.0.3865.75 ...)
{DSA-4562-1}
@@ -33237,84 +33253,121 @@ CVE-2019-13765 (Use-after-free in content delivery
manager in Google Chrome prio
{DSA-4562-1}
- chromium 78.0.3904.87-1
CVE-2019-13764 (Type confusion in JavaScript in Google Chrome prior to
79.0.3945.79 al ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13763 (Insufficient policy enforcement in payments in Google Chrome
prior to ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13762 (Insufficient policy enforcement in downloads in Google Chrome
on Windo ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13761 (Incorrect security UI in Omnibox in Google Chrome prior to
79.0.3945.7 ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13760
RESERVED
CVE-2019-13759 (Incorrect security UI in interstitials in Google Chrome prior
to 79.0. ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13758 (Insufficient policy enforcement in navigation in Google Chrome
on Andr ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13757 (Incorrect security UI in Omnibox in Google Chrome prior to
79.0.3945.7 ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13756 (Incorrect security UI in printing in Google Chrome prior to
79.0.3945. ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13755 (Insufficient policy enforcement in extensions in Google Chrome
prior t ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13754 (Insufficient policy enforcement in extensions in Google Chrome
prior t ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13753 (Out of bounds read in SQLite in Google Chrome prior to
79.0.3945.79 al ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13752 (Out of bounds read in SQLite in Google Chrome prior to
79.0.3945.79 al ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13751 (Uninitialized data in SQLite in Google Chrome prior to
79.0.3945.79 al ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13750 (Insufficient data validation in SQLite in Google Chrome prior
to 79.0. ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13749 (Incorrect security UI in Omnibox in Google Chrome on iOS prior
to 79.0 ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13748 (Insufficient policy enforcement in developer tools in Google
Chrome pr ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13747 (Uninitialized data in rendering in Google Chrome on Android
prior to 7 ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13746 (Insufficient policy enforcement in Omnibox in Google Chrome
prior to 7 ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13745 (Insufficient policy enforcement in audio in Google Chrome
prior to 79. ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13744 (Insufficient policy enforcement in cookies in Google Chrome
prior to 7 ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13743 (Incorrect security UI in external protocol handling in Google
Chrome p ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13742 (Incorrect security UI in Omnibox in Google Chrome on iOS prior
to 79.0 ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13741 (Insufficient validation of untrusted input in Blink in Google
Chrome p ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13740 (Incorrect security UI in sharing in Google Chrome prior to
79.0.3945.7 ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13739 (Insufficient policy enforcement in Omnibox in Google Chrome
prior to 7 ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13738 (Insufficient policy enforcement in navigation in Google Chrome
prior t ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13737 (Insufficient policy enforcement in autocomplete in Google
Chrome prior ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13736 (Integer overflow in PDFium in Google Chrome prior to
79.0.3945.79 allo ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13735 (Out of bounds write in JavaScript in Google Chrome prior to
79.0.3945. ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13734 (Out of bounds write in SQLite in Google Chrome prior to
79.0.3945.79 a ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13733
RESERVED
CVE-2019-13732 (Use-after-free in WebAudio in Google Chrome prior to
79.0.3945.79 allo ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13731
RESERVED
CVE-2019-13730 (Type confusion in JavaScript in Google Chrome prior to
79.0.3945.79 al ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13729 (Use-after-free in WebSockets in Google Chrome prior to
79.0.3945.79 al ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13728 (Out of bounds write in JavaScript in Google Chrome prior to
79.0.3945. ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13727 (Insufficient policy enforcement in WebSockets in Google Chrome
prior t ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13726 (Buffer overflow in password manager in Google Chrome prior to
79.0.394 ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13725 (Use-after-free in Bluetooth in Google Chrome prior to
79.0.3945.79 all ...)
+ {DSA-4606-1}
- chromium 79.0.3945.79-1
CVE-2019-13724 (Out of bounds memory access in WebBluetooth in Google Chrome
prior to ...)
{DSA-4575-1}
@@ -33646,6 +33699,7 @@ CVE-2019-13619 (In Wireshark 3.0.0 to 3.0.2, 2.6.0 to
2.6.9, and 2.4.0 to 2.4.15
NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15870
NOTE:
https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=7e90aed666e809c0db5de9d1816802a7dcea28d9
CVE-2019-13618 (In GPAC before 0.8.0, isomedia/isom_read.c in libgpac.a has a
heap-bas ...)
+ {DLA-2072-1}
- gpac <unfixed> (low; bug #932242)
[buster] - gpac <no-dsa> (Minor issue)
[stretch] - gpac <no-dsa> (Minor issue)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/d6638748e013b653b1e792019987909827a0572d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/d6638748e013b653b1e792019987909827a0572d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
