Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
ca6ac054 by security tracker role at 2021-01-25T20:10:27+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,197 @@
+CVE-2021-26123
+       RESERVED
+CVE-2021-26122
+       RESERVED
+CVE-2021-26121
+       RESERVED
+CVE-2021-26120
+       RESERVED
+CVE-2021-26119
+       RESERVED
+CVE-2021-26118
+       RESERVED
+CVE-2021-26117
+       RESERVED
+CVE-2021-26116
+       RESERVED
+CVE-2021-26115
+       RESERVED
+CVE-2021-26114
+       RESERVED
+CVE-2021-26113
+       RESERVED
+CVE-2021-26112
+       RESERVED
+CVE-2021-26111
+       RESERVED
+CVE-2021-26110
+       RESERVED
+CVE-2021-26109
+       RESERVED
+CVE-2021-26108
+       RESERVED
+CVE-2021-26107
+       RESERVED
+CVE-2021-26106
+       RESERVED
+CVE-2021-26105
+       RESERVED
+CVE-2021-26104
+       RESERVED
+CVE-2021-26103
+       RESERVED
+CVE-2021-26102
+       RESERVED
+CVE-2021-26101
+       RESERVED
+CVE-2021-26100
+       RESERVED
+CVE-2021-26099
+       RESERVED
+CVE-2021-26098
+       RESERVED
+CVE-2021-26097
+       RESERVED
+CVE-2021-26096
+       RESERVED
+CVE-2021-26095
+       RESERVED
+CVE-2021-26094
+       RESERVED
+CVE-2021-26093
+       RESERVED
+CVE-2021-26092
+       RESERVED
+CVE-2021-26091
+       RESERVED
+CVE-2021-26090
+       RESERVED
+CVE-2021-26089
+       RESERVED
+CVE-2021-26088
+       RESERVED
+CVE-2021-26087
+       RESERVED
+CVE-2021-26086
+       RESERVED
+CVE-2021-26085
+       RESERVED
+CVE-2021-26084
+       RESERVED
+CVE-2021-26083
+       RESERVED
+CVE-2021-26082
+       RESERVED
+CVE-2021-26081
+       RESERVED
+CVE-2021-26080
+       RESERVED
+CVE-2021-26079
+       RESERVED
+CVE-2021-26078
+       RESERVED
+CVE-2021-26077
+       RESERVED
+CVE-2021-26076
+       RESERVED
+CVE-2021-26075
+       RESERVED
+CVE-2021-26074
+       RESERVED
+CVE-2021-26073
+       RESERVED
+CVE-2021-26072
+       RESERVED
+CVE-2021-26071
+       RESERVED
+CVE-2021-26070
+       RESERVED
+CVE-2021-26069
+       RESERVED
+CVE-2021-26068
+       RESERVED
+CVE-2021-26067
+       RESERVED
+CVE-2021-26066
+       RESERVED
+CVE-2021-26065
+       RESERVED
+CVE-2021-26064
+       RESERVED
+CVE-2021-26063
+       RESERVED
+CVE-2021-26062
+       RESERVED
+CVE-2021-26061
+       RESERVED
+CVE-2021-26060
+       RESERVED
+CVE-2021-26059
+       RESERVED
+CVE-2021-26058
+       RESERVED
+CVE-2021-26057
+       RESERVED
+CVE-2021-26056
+       RESERVED
+CVE-2021-26055
+       RESERVED
+CVE-2021-26054
+       RESERVED
+CVE-2021-26053
+       RESERVED
+CVE-2021-26052
+       RESERVED
+CVE-2021-26051
+       RESERVED
+CVE-2021-26050
+       RESERVED
+CVE-2021-26049
+       RESERVED
+CVE-2021-26048
+       RESERVED
+CVE-2021-26047
+       RESERVED
+CVE-2021-26046
+       RESERVED
+CVE-2021-26045
+       RESERVED
+CVE-2021-26044
+       RESERVED
+CVE-2021-26043
+       RESERVED
+CVE-2021-26042
+       RESERVED
+CVE-2021-26041
+       RESERVED
+CVE-2021-26040
+       RESERVED
+CVE-2021-26039
+       RESERVED
+CVE-2021-26038
+       RESERVED
+CVE-2021-26037
+       RESERVED
+CVE-2021-26036
+       RESERVED
+CVE-2021-26035
+       RESERVED
+CVE-2021-26034
+       RESERVED
+CVE-2021-26033
+       RESERVED
+CVE-2021-26032
+       RESERVED
+CVE-2021-26031
+       RESERVED
+CVE-2021-26030
+       RESERVED
+CVE-2021-26029
+       RESERVED
+CVE-2021-26028
+       RESERVED
+CVE-2021-26027
+       RESERVED
 CVE-2021-3287
        RESERVED
 CVE-2021-26026 (PlugIns\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 
has a Use ...)
@@ -267,23 +461,23 @@ CVE-2021-25902 (An issue was discovered in the 
glsl-layout crate before 0.4.0 fo
        NOT-FOR-US: Rust crate glsl-layout
 CVE-2021-25901 (An issue was discovered in the lazy-init crate through 
2021-01-17 for  ...)
        NOT-FOR-US: Rust crate lazy-init
-CVE-2020-36230
+CVE-2020-36230 (A flaw was discovered in OpenLDAP before 2.4.57 leading in an 
assertio ...)
        - openldap 2.4.57+dfsg-1
        NOTE: https://bugs.openldap.org/show_bug.cgi?id=9423
        NOTE: 
https://git.openldap.org/openldap/openldap/-/commit/8c1d96ee36ed98b32cd0e28b7069c7b8ea09d793
 (OPENLDAP_REL_ENG_2_4_57)
-CVE-2020-36229
+CVE-2020-36229 (A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 
2.4.57 lead ...)
        - openldap 2.4.57+dfsg-1
        NOTE: https://bugs.openldap.org/show_bug.cgi?id=9425
        NOTE: 
https://git.openldap.org/openldap/openldap/-/commit/4bdfffd2889c0c5cdf58bebafbdc8fce4bb2bff0
 (OPENLDAP_REL_ENG_2_4_57)
-CVE-2020-36228
+CVE-2020-36228 (An integer underflow was discovered in OpenLDAP before 2.4.57 
leading  ...)
        - openldap 2.4.57+dfsg-1
        NOTE: https://bugs.openldap.org/show_bug.cgi?id=9427
        NOTE: 
https://git.openldap.org/openldap/openldap/-/commit/91dccd25c347733b365adc74cb07d074512ed5ad
 (OPENLDAP_REL_ENG_2_4_57)
-CVE-2020-36227
+CVE-2020-36227 (A flaw was discovered in OpenLDAP before 2.4.57 leading to an 
infinite ...)
        - openldap 2.4.57+dfsg-1
        NOTE: https://bugs.openldap.org/show_bug.cgi?id=9428
        NOTE: 
https://git.openldap.org/openldap/openldap/-/commit/9d0e8485f3113505743baabf1167e01e4558ccf5
 (OPENLDAP_REL_ENG_2_4_57)
-CVE-2020-36226
+CVE-2020-36226 (A flaw was discovered in OpenLDAP before 2.4.57 leading to a 
memch-&gt ...)
        - openldap 2.4.57+dfsg-1
        NOTE: 
https://git.openldap.org/openldap/openldap/-/commit/554dff1927176579d652f2fe60c90e9abbad4c65
 (OPENLDAP_REL_ENG_2_4_57)
        NOTE: 
https://git.openldap.org/openldap/openldap/-/commit/c0b61a9486508e5202aa2e0cfb68c9813731b439
 (OPENLDAP_REL_ENG_2_4_57)
@@ -291,7 +485,7 @@ CVE-2020-36226
        NOTE: https://bugs.openldap.org/show_bug.cgi?id=9413
        NOTE: 
https://git.openldap.org/openldap/openldap/-/commit/d169e7958a3e0dc70f59c8374bf8a59833b7bdd8
 (OPENLDAP_REL_ENG_2_4_57)
        NOTE: CVE-2020-36224, CVE-2020-36225 and CVE-2020-36226 are related but 
differend ids
-CVE-2020-36225
+CVE-2020-36225 (A flaw was discovered in OpenLDAP before 2.4.57 leading to a 
double fr ...)
        - openldap 2.4.57+dfsg-1
        NOTE: 
https://git.openldap.org/openldap/openldap/-/commit/554dff1927176579d652f2fe60c90e9abbad4c65
 (OPENLDAP_REL_ENG_2_4_57)
        NOTE: 
https://git.openldap.org/openldap/openldap/-/commit/c0b61a9486508e5202aa2e0cfb68c9813731b439
 (OPENLDAP_REL_ENG_2_4_57)
@@ -299,7 +493,7 @@ CVE-2020-36225
        NOTE: 
https://git.openldap.org/openldap/openldap/-/commit/5a2017d4e61a6ddc4dcb4415028e0d08eb6bca26
 (OPENLDAP_REL_ENG_2_4_57)
        NOTE: 
https://git.openldap.org/openldap/openldap/-/commit/d169e7958a3e0dc70f59c8374bf8a59833b7bdd8
 (OPENLDAP_REL_ENG_2_4_57)
        NOTE: CVE-2020-36224, CVE-2020-36225 and CVE-2020-36226 are related but 
differend ids
-CVE-2020-36224
+CVE-2020-36224 (A flaw was discovered in OpenLDAP before 2.4.57 leading to an 
invalid  ...)
        - openldap 2.4.57+dfsg-1
        NOTE: https://bugs.openldap.org/show_bug.cgi?id=9409
        NOTE: 
https://git.openldap.org/openldap/openldap/-/commit/554dff1927176579d652f2fe60c90e9abbad4c65
 (OPENLDAP_REL_ENG_2_4_57)
@@ -307,18 +501,18 @@ CVE-2020-36224
        NOTE: 
https://git.openldap.org/openldap/openldap/-/commit/5a2017d4e61a6ddc4dcb4415028e0d08eb6bca26
 (OPENLDAP_REL_ENG_2_4_57)
        NOTE: 
https://git.openldap.org/openldap/openldap/-/commit/d169e7958a3e0dc70f59c8374bf8a59833b7bdd8
 (OPENLDAP_REL_ENG_2_4_57)
        NOTE: CVE-2020-36224, CVE-2020-36225 and CVE-2020-36226 are related but 
differend ids
-CVE-2020-36223
+CVE-2020-36223 (A flaw was discovered in OpenLDAP before 2.4.57 leading to a 
slapd cra ...)
        - openldap 2.4.57+dfsg-1
        NOTE: https://bugs.openldap.org/show_bug.cgi?id=9408
        NOTE: 
https://git.openldap.org/openldap/openldap/-/commit/21981053a1195ae1555e23df4d9ac68d34ede9dd
 (OPENLDAP_REL_ENG_2_4_57)
-CVE-2020-36222
+CVE-2020-36222 (A flaw was discovered in OpenLDAP before 2.4.57 leading to an 
assertio ...)
        - openldap 2.4.57+dfsg-1
        NOTE: https://bugs.openldap.org/show_bug.cgi?id=9406
        NOTE: 
https://git.openldap.org/openldap/openldap/-/commit/6ed057b5b728b50746c869bcc9c1f85d0bbbf6ed
 (OPENLDAP_REL_ENG_2_4_57)
        NOTE: 
https://git.openldap.org/openldap/openldap/-/commit/02dfc32d658fadc25e4040f78e36592f6e1e1ca0
 (OPENLDAP_REL_ENG_2_4_57)
        NOTE: https://bugs.openldap.org/show_bug.cgi?id=9407
        NOTE: 
https://git.openldap.org/openldap/openldap/-/commit/6ed057b5b728b50746c869bcc9c1f85d0bbbf6ed
 (OPENLDAP_REL_ENG_2_4_57)
-CVE-2020-36221
+CVE-2020-36221 (An integer underflow was discovered in OpenLDAP before 2.4.57 
leading  ...)
        - openldap 2.4.57+dfsg-1
        NOTE: https://bugs.openldap.org/show_bug.cgi?id=9404
        NOTE: 
https://git.openldap.org/openldap/openldap/-/commit/38ac838e4150c626bbfa0082b7e2cf3a2bb4df31
 (OPENLDAP_REL_ENG_2_4_57)
@@ -366,8 +560,8 @@ CVE-2021-3280
        RESERVED
 CVE-2021-3279
        RESERVED
-CVE-2021-3278
-       RESERVED
+CVE-2021-3278 (Local Service Search Engine Management System 1.0 has a 
vulnerability  ...)
+       TODO: check
 CVE-2021-3277
        RESERVED
 CVE-2021-3276
@@ -989,7 +1183,7 @@ CVE-2021-3192
        RESERVED
 CVE-2021-3191
        RESERVED
-CVE-2021-3190 (The async-git package before 1.13.1 for Node.js allows OS 
Command Inje ...)
+CVE-2021-3190 (The async-git package before 1.13.2 for Node.js allows OS 
Command Inje ...)
        TODO: check
 CVE-2021-25678
        RESERVED
@@ -1877,8 +2071,7 @@ CVE-2021-25288
        RESERVED
 CVE-2021-25287
        RESERVED
-CVE-2021-3185 [gstreamer: stack buffer overflow in 
gst_h264_slice_parse_dec_ref_pic_marking]
-       RESERVED
+CVE-2021-3185 (A flaw was found in the gstreamer h264 component of 
gst-plugins-bad be ...)
        {DSA-4833-1 DLA-2528-1}
        - gst-plugins-bad1.0 1.18.1-1
        NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1917192
@@ -4765,8 +4958,7 @@ CVE-2021-23903
        RESERVED
 CVE-2021-23902
        RESERVED
-CVE-2021-23901
-       RESERVED
+CVE-2021-23901 (An XML external entity (XXE) injection vulnerability was 
discovered in ...)
        NOT-FOR-US: Apache Nutch
 CVE-2021-23900 (OWASP json-sanitizer before 1.2.2 can output invalid JSON or 
throw an  ...)
        NOT-FOR-US: OWASP json-sanitizer
@@ -7198,10 +7390,10 @@ CVE-2021-22700
        RESERVED
 CVE-2021-22699
        RESERVED
-CVE-2021-22698
-       RESERVED
-CVE-2021-22697
-       RESERVED
+CVE-2021-22698 (A CWE-434: Unrestricted Upload of File with Dangerous Type 
vulnerabili ...)
+       TODO: check
+CVE-2021-22697 (A CWE-434: Unrestricted Upload of File with Dangerous Type 
vulnerabili ...)
+       TODO: check
 CVE-2020-36189 (FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the 
interact ...)
        - jackson-databind 2.12.1-1
        [buster] - jackson-databind <no-dsa> (Minor issue)
@@ -10581,10 +10773,10 @@ CVE-2020-35856
        RESERVED
 CVE-2020-35855
        RESERVED
-CVE-2020-35854
-       RESERVED
-CVE-2020-35853
-       RESERVED
+CVE-2020-35854 (Textpattern 4.8.4 is affected by cross-site scripting (XSS) in 
the Bod ...)
+       TODO: check
+CVE-2020-35853 (4images Image Gallery Management System 1.7.11 is affected by 
cross-si ...)
+       TODO: check
 CVE-2020-35852
        RESERVED
 CVE-2020-35851 (HGiga MailSherlock does not validate specific parameters 
properly. Att ...)
@@ -10626,8 +10818,8 @@ CVE-2020-35845
        RESERVED
 CVE-2020-35844
        RESERVED
-CVE-2020-35843
-       RESERVED
+CVE-2020-35843 (FastStone Image Viewer 7.5 has an out-of-bounds write (via a 
crafted i ...)
+       TODO: check
 CVE-2020-35842 (Certain NETGEAR devices are affected by stored XSS. This 
affects D6200 ...)
        NOT-FOR-US: Netgear
 CVE-2020-35841 (Certain NETGEAR devices are affected by stored XSS. This 
affects D6200 ...)
@@ -11456,8 +11648,8 @@ CVE-2021-21274
        RESERVED
 CVE-2021-21273
        RESERVED
-CVE-2021-21272
-       RESERVED
+CVE-2021-21272 (ORAS is open source software which enables a way to push OCI 
Artifacts ...)
+       TODO: check
 CVE-2021-21271
        RESERVED
 CVE-2021-21270 (OctopusDSC is a PowerShell module with DSC resources that can 
be used  ...)
@@ -14242,8 +14434,7 @@ CVE-2020-35515
 CVE-2020-35514
        RESERVED
        NOT-FOR-US: OpenShift
-CVE-2020-35513 [nfsd: fix incorrect umasks]
-       RESERVED
+CVE-2020-35513 (A flaw incorrect umask during file or directory modification 
in the Li ...)
        - linux 4.16.5-1
        [stretch] - linux <not-affected> (Vulnerable code introduce later)
        NOTE: 
https://git.kernel.org/linus/880a3a5325489a143269a8e172e7563ebf9897bc
@@ -14578,6 +14769,7 @@ CVE-2020-35461
 CVE-2020-35460 (common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 
allows dir ...)
        NOT-FOR-US: Packwood MPXJ
 CVE-2020-35459 (An issue was discovered in ClusterLabs crmsh through 4.2.1. 
Local atta ...)
+       {DLA-2533-1}
        - crmsh <unfixed>
        NOTE: https://www.openwall.com/lists/oss-security/2021/01/12/3
 CVE-2020-35458 (An issue was discovered in ClusterLabs Hawk 2.x through 
2.3.0-x. There ...)
@@ -14974,8 +15166,8 @@ CVE-2020-35272 (Employee Performance Evaluation System 
in PHP/MySQLi with Source
        NOT-FOR-US: Employee Performance Evaluation System in PHP/MySQLi with 
Source Code
 CVE-2020-35271 (Employee Performance Evaluation System in PHP/MySQLi with 
Source Code  ...)
        NOT-FOR-US: Employee Performance Evaluation System in PHP/MySQLi with 
Source Code
-CVE-2020-35270
-       RESERVED
+CVE-2020-35270 (Student Result Management System In PHP With Source Code is 
affected b ...)
+       TODO: check
 CVE-2020-35269 (Nagios Core application version 4.2.4 is vulnerable to 
Site-Wide Cross ...)
        - nagios4 <undetermined>
        NOTE: https://gist.github.com/MoSalah20/d1d40b43eafba0bd22ee4cddecad3cbc
@@ -23064,8 +23256,8 @@ CVE-2020-28223
        RESERVED
 CVE-2020-28222
        RESERVED
-CVE-2020-28221
-       RESERVED
+CVE-2020-28221 (A CWE-20: Improper Input Validation vulnerability exists in 
EcoStruxur ...)
+       TODO: check
 CVE-2020-28220 (A CWE-119: Improper Restriction of Operations within the 
Bounds of a M ...)
        NOT-FOR-US: Modicon
 CVE-2020-28219 (A CWE-522: Insufficiently Protected Credentials vulnerability 
exists i ...)
@@ -24212,8 +24404,7 @@ CVE-2020-27815
        RESERVED
        - linux 5.10.4-1
        NOTE: https://www.openwall.com/lists/oss-security/2020/11/30/5
-CVE-2020-27814
-       RESERVED
+CVE-2020-27814 (A heap-buffer overflow was found in the way openjpeg2 handled 
certain  ...)
        - openjpeg2 <unfixed>
        NOTE: https://github.com/uclouvain/openjpeg/issues/1283
 CVE-2020-27813 (An integer overflow vulnerability exists with the length of 
websocket  ...)
@@ -29503,8 +29694,8 @@ CVE-2020-25739 (An issue was discovered in the gon gem 
before gon-6.4.0 for Ruby
        NOTE: 
https://github.com/gazay/gon/commit/fe3c7b2191a992386dc9edd37de5447a4e809bc7
 CVE-2020-25738 (CyberArk Endpoint Privilege Manager (EPM) 11.1.0.173 allows 
attackers  ...)
        NOT-FOR-US: CyberArk Endpoint Privilege Manager (EPM)
-CVE-2020-25737
-       RESERVED
+CVE-2020-25737 (An elevation of privilege vulnerability exists in Hackolade 
versions p ...)
+       TODO: check
 CVE-2020-25736
        RESERVED
 CVE-2020-25735 (webTareas through 2.1 allows XSS in clients/editclient.php, 
extensions ...)
@@ -46506,8 +46697,8 @@ CVE-2020-17534 (There exists a race condition between 
the deletion of the tempor
        TODO: check
 CVE-2020-17533 (Apache Accumulo versions 1.5.0 through 1.10.0 and version 
2.0.0 do not ...)
        NOT-FOR-US: Apache Accumulo
-CVE-2020-17532
-       RESERVED
+CVE-2020-17532 (When handler-router component is enabled in 
servicecomb-java-chassis,  ...)
+       TODO: check
 CVE-2020-17531 (A Java Serialization vulnerability was found in Apache 
Tapestry 4. Apa ...)
        NOT-FOR-US: Apache Tapestry
 CVE-2020-17530 (Forced OGNL evaluation, when evaluated on raw user input in 
tag attrib ...)
@@ -46528,7 +46719,7 @@ CVE-2020-17526 (Incorrect Session Validation in Apache 
Airflow Webserver version
 CVE-2020-17525
        RESERVED
 CVE-2020-17524
-       RESERVED
+       REJECTED
 CVE-2020-17523
        RESERVED
 CVE-2020-17522
@@ -49301,8 +49492,8 @@ CVE-2020-16238
        RESERVED
 CVE-2020-16237 (Philips SureSigns VS4, A.07.107 and prior. The product 
receives input  ...)
        NOT-FOR-US: Philips SureSigns
-CVE-2020-16236
-       RESERVED
+CVE-2020-16236 (FPWIN Pro is vulnerable to an out-of-bounds read vulnerability 
when a  ...)
+       TODO: check
 CVE-2020-16235
        RESERVED
 CVE-2020-16234 (In PLC WinProladder Version 3.28 and prior, a stack-based 
buffer overf ...)
@@ -75523,10 +75714,10 @@ CVE-2020-6782
        RESERVED
 CVE-2020-6781 (Improper certificate validation for certain connections in the 
Bosch S ...)
        NOT-FOR-US: Bosch Smart Home System App for iOS
-CVE-2020-6780
-       RESERVED
-CVE-2020-6779
-       RESERVED
+CVE-2020-6780 (Use of Password Hash With Insufficient Computational Effort in 
the dat ...)
+       TODO: check
+CVE-2020-6779 (Use of Hard-coded Credentials in the database of Bosch FSM-2500 
server ...)
+       TODO: check
 CVE-2020-6778
        RESERVED
 CVE-2020-6777 (A vulnerability in the web-based management interface of Bosch 
PRAESID ...)
@@ -78803,139 +78994,139 @@ CVE-2020-5496 (FontForge 20190801 has a heap-based 
buffer overflow in the Type2N
        [jessie] - fontforge <no-dsa> (Minor issue)
        NOTE: https://github.com/fontforge/fontforge/issues/4085
 CVE-2020-5495
-       RESERVED
+       REJECTED
 CVE-2020-5494
-       RESERVED
+       REJECTED
 CVE-2020-5493
-       RESERVED
+       REJECTED
 CVE-2020-5492
-       RESERVED
+       REJECTED
 CVE-2020-5491
-       RESERVED
+       REJECTED
 CVE-2020-5490
-       RESERVED
+       REJECTED
 CVE-2020-5489
-       RESERVED
+       REJECTED
 CVE-2020-5488
-       RESERVED
+       REJECTED
 CVE-2020-5487
-       RESERVED
+       REJECTED
 CVE-2020-5486
-       RESERVED
+       REJECTED
 CVE-2020-5485
-       RESERVED
+       REJECTED
 CVE-2020-5484
-       RESERVED
+       REJECTED
 CVE-2020-5483
-       RESERVED
+       REJECTED
 CVE-2020-5482
-       RESERVED
+       REJECTED
 CVE-2020-5481
-       RESERVED
+       REJECTED
 CVE-2020-5480
-       RESERVED
+       REJECTED
 CVE-2020-5479
-       RESERVED
+       REJECTED
 CVE-2020-5478
-       RESERVED
+       REJECTED
 CVE-2020-5477
-       RESERVED
+       REJECTED
 CVE-2020-5476
-       RESERVED
+       REJECTED
 CVE-2020-5475
-       RESERVED
+       REJECTED
 CVE-2020-5474
-       RESERVED
+       REJECTED
 CVE-2020-5473
-       RESERVED
+       REJECTED
 CVE-2020-5472
-       RESERVED
+       REJECTED
 CVE-2020-5471
-       RESERVED
+       REJECTED
 CVE-2020-5470
-       RESERVED
+       REJECTED
 CVE-2020-5469
-       RESERVED
+       REJECTED
 CVE-2020-5468
-       RESERVED
+       REJECTED
 CVE-2020-5467
-       RESERVED
+       REJECTED
 CVE-2020-5466
-       RESERVED
+       REJECTED
 CVE-2020-5465
-       RESERVED
+       REJECTED
 CVE-2020-5464
-       RESERVED
+       REJECTED
 CVE-2020-5463
-       RESERVED
+       REJECTED
 CVE-2020-5462
-       RESERVED
+       REJECTED
 CVE-2020-5461
-       RESERVED
+       REJECTED
 CVE-2020-5460
-       RESERVED
+       REJECTED
 CVE-2020-5459
-       RESERVED
+       REJECTED
 CVE-2020-5458
-       RESERVED
+       REJECTED
 CVE-2020-5457
-       RESERVED
+       REJECTED
 CVE-2020-5456
-       RESERVED
+       REJECTED
 CVE-2020-5455
-       RESERVED
+       REJECTED
 CVE-2020-5454
-       RESERVED
+       REJECTED
 CVE-2020-5453
-       RESERVED
+       REJECTED
 CVE-2020-5452
-       RESERVED
+       REJECTED
 CVE-2020-5451
-       RESERVED
+       REJECTED
 CVE-2020-5450
-       RESERVED
+       REJECTED
 CVE-2020-5449
-       RESERVED
+       REJECTED
 CVE-2020-5448
-       RESERVED
+       REJECTED
 CVE-2020-5447
-       RESERVED
+       REJECTED
 CVE-2020-5446
-       RESERVED
+       REJECTED
 CVE-2020-5445
-       RESERVED
+       REJECTED
 CVE-2020-5444
-       RESERVED
+       REJECTED
 CVE-2020-5443
-       RESERVED
+       REJECTED
 CVE-2020-5442
-       RESERVED
+       REJECTED
 CVE-2020-5441
-       RESERVED
+       REJECTED
 CVE-2020-5440
-       RESERVED
+       REJECTED
 CVE-2020-5439
-       RESERVED
+       REJECTED
 CVE-2020-5438
-       RESERVED
+       REJECTED
 CVE-2020-5437
-       RESERVED
+       REJECTED
 CVE-2020-5436
-       RESERVED
+       REJECTED
 CVE-2020-5435
-       RESERVED
+       REJECTED
 CVE-2020-5434
-       RESERVED
+       REJECTED
 CVE-2020-5433
-       RESERVED
+       REJECTED
 CVE-2020-5432
-       RESERVED
+       REJECTED
 CVE-2020-5431
-       RESERVED
+       REJECTED
 CVE-2020-5430
-       RESERVED
+       REJECTED
 CVE-2020-5429
-       RESERVED
+       REJECTED
 CVE-2020-5428
        RESERVED
 CVE-2020-5427
@@ -96001,8 +96192,8 @@ CVE-2020-0238 (In updatePreferenceIntents of 
AccountTypePreferenceLoader, there
        NOT-FOR-US: Android
 CVE-2020-0237
        RESERVED
-CVE-2020-0236
-       RESERVED
+CVE-2020-0236 (In A2DP_GetCodecType of a2dp_codec_config, there is a possible 
out-of- ...)
+       TODO: check
 CVE-2020-0235 (In crus_sp_shared_ioctl we first copy 4 bytes from userdata 
into "size ...)
        NOT-FOR-US: Pixel kernel drivers
 CVE-2020-0234 (In crus_afe_get_param of msm-cirrus-playback.c, there is a 
possible ou ...)
@@ -117910,51 +118101,51 @@ CVE-2019-11319 (An issue was discovered in Motorola 
CX2 1.01 and M2 1.01. There
 CVE-2019-11318 (Zimbra Collaboration before 8.8.12 Patch 1 has persistent XSS. 
...)
        NOT-FOR-US: Zimbra Collaboration
 CVE-2019-11317
-       RESERVED
+       REJECTED
 CVE-2019-11316
-       RESERVED
+       REJECTED
 CVE-2019-11315
-       RESERVED
+       REJECTED
 CVE-2019-11314
-       RESERVED
+       REJECTED
 CVE-2019-11313
-       RESERVED
+       REJECTED
 CVE-2019-11312
-       RESERVED
+       REJECTED
 CVE-2019-11311
-       RESERVED
+       REJECTED
 CVE-2019-11310
-       RESERVED
+       REJECTED
 CVE-2019-11309
-       RESERVED
+       REJECTED
 CVE-2019-11308
-       RESERVED
+       REJECTED
 CVE-2019-11307
-       RESERVED
+       REJECTED
 CVE-2019-11306
-       RESERVED
+       REJECTED
 CVE-2019-11305
-       RESERVED
+       REJECTED
 CVE-2019-11304
-       RESERVED
+       REJECTED
 CVE-2019-11303
-       RESERVED
+       REJECTED
 CVE-2019-11302
-       RESERVED
+       REJECTED
 CVE-2019-11301
-       RESERVED
+       REJECTED
 CVE-2019-11300
-       RESERVED
+       REJECTED
 CVE-2019-11299
-       RESERVED
+       REJECTED
 CVE-2019-11298
-       RESERVED
+       REJECTED
 CVE-2019-11297
-       RESERVED
+       REJECTED
 CVE-2019-11296
-       RESERVED
+       REJECTED
 CVE-2019-11295
-       RESERVED
+       REJECTED
 CVE-2019-11294 (Cloud Foundry Cloud Controller API (CAPI), version 1.88.0, 
allows spac ...)
        NOT-FOR-US: Cloud Foundry
 CVE-2019-11293 (Cloud Foundry UAA Release, versions prior to v74.10.0, when 
set to log ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ca6ac054fd65566453aaf3603cc7711281593357

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ca6ac054fd65566453aaf3603cc7711281593357
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to