Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
74f45cf5 by Salvatore Bonaccorso at 2020-06-15T22:46:34+02:00
Process NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5,13 +5,13 @@ CVE-2020-14161
CVE-2020-14160
RESERVED
CVE-2020-14159 (By using an Automate API in ConnectWise Automate before
2020.5.178, a ...)
- TODO: check
+ NOT-FOR-US: ConnectWise
CVE-2020-14158
RESERVED
CVE-2020-14157
RESERVED
CVE-2020-14156 (user_channel/passwd_mgr.cpp in OpenBMC phosphor-host-ipmid
before 2020 ...)
- TODO: check
+ NOT-FOR-US: OpenBMC
CVE-2020-14155 (libpcre in PCRE before 8.44 allows an integer overflow via a
large num ...)
- pcre3 <unfixed>
NOTE: Fixed by: https://vcs.pcre.org/pcre?view=revision&revision=1761
(8.44)
@@ -31,13 +31,13 @@ CVE-2020-14150 (GNU Bison before 3.5.4 allows attackers to
cause a denial of ser
- bison 2:3.6.1+dfsg-1
NOTE: https://lists.gnu.org/archive/html/info-gnu/2020-04/msg00000.html
CVE-2020-14149 (In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the
path provi ...)
- TODO: check
+ NOT-FOR-US: uftpd
CVE-2020-14148 (The Server-Server protocol implementation in ngIRCd before
26~rc2 allo ...)
TODO: check
CVE-2020-14147 (An integer overflow in the getnum function in lua_struct.c in
Redis be ...)
TODO: check
CVE-2020-14146 (KumbiaPHP through 1.1.1, in Development mode, allows XSS via
the publi ...)
- TODO: check
+ NOT-FOR-US: KumbiaPHP
CVE-2020-14145
RESERVED
CVE-2020-14144
@@ -187,7 +187,7 @@ CVE-2020-14078 (TRENDnet TEW-827DRU devices through 2.06B04
contain a stack-base
CVE-2020-14077 (TRENDnet TEW-827DRU devices through 2.06B04 contain a
stack-based buff ...)
NOT-FOR-US: TRENDnet
CVE-2020-14076 (TRENDnet TEW-827DRU devices through 2.06B04 contain a
stack-based buff ...)
- TODO: check
+ NOT-FOR-US: TRENDnet TEW-827DRU devices
CVE-2020-14075 (TRENDnet TEW-827DRU devices through 2.06B04 contain multiple
command i ...)
NOT-FOR-US: TRENDnet
CVE-2020-14074 (TRENDnet TEW-827DRU devices through 2.06B04 contain a
stack-based buff ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/74f45cf5f982df670637a76e0232b411a76997c0
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/74f45cf5f982df670637a76e0232b411a76997c0
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
