Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1648d365 by security tracker role at 2020-08-14T08:10:17+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,15 @@
+CVE-2020-24355
+ RESERVED
+CVE-2020-24354
+ RESERVED
+CVE-2020-24353
+ RESERVED
+CVE-2020-24352
+ RESERVED
+CVE-2020-24351
+ RESERVED
+CVE-2020-24350
+ RESERVED
CVE-2020-24349 (njs through 0.4.3, used in NGINX, allows control-flow hijack
in njs_va ...)
TODO: check
CVE-2020-24348 (njs through 0.4.3, used in NGINX, has an out-of-bounds read in
njs_jso ...)
@@ -17225,7 +17237,7 @@ CVE-2020-15826 (In JetBrains TeamCity before 2020.1,
users are able to assign mo
NOT-FOR-US: JetBrains TeamCity
CVE-2020-15825 (In JetBrains TeamCity before 2020.1, users with the Modify
Group permi ...)
NOT-FOR-US: JetBrains TeamCity
-CVE-2020-15824 (In JetBrains Kotlin before 1.4.0, there is a script-cache
privilege es ...)
+CVE-2020-15824 (In JetBrains Kotlin from 1.4-M1 to 1.4-RC (as Kotlin 1.3.70 is
not aff ...)
- kotlin <itp> (bug #892842)
CVE-2020-15823 (JetBrains YouTrack before 2020.2.8873 is vulnerable to SSRF in
the Wor ...)
NOT-FOR-US: JetBrains YouTrack
@@ -40162,8 +40174,8 @@ CVE-2019-20385 (The CSV upload feature in
/supervisor/procesa_carga.php on Logar
NOT-FOR-US: Logaritmo Aware CallManager 2012 devices
CVE-2019-20384 (Gentoo Portage through 2.3.84 allows local users to place a
Trojan hor ...)
NOT-FOR-US: Portage
-CVE-2019-20383
- RESERVED
+CVE-2019-20383 (ABBYY network license server in ABBYY FineReader 15 before
Release 4 ( ...)
+ TODO: check
CVE-2019-20382 (QEMU 4.1.0 has a memory leak in zrle_compress_data in
ui/vnc-enc-zrle. ...)
{DSA-4665-1 DLA-2288-1}
- qemu 1:4.2-1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1648d365035fc7dd3ce67ab723c736207c224297
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1648d365035fc7dd3ce67ab723c736207c224297
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
