Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6d664e21 by security tracker role at 2021-09-14T08:10:24+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,185 @@
+CVE-2021-41076
+ RESERVED
+CVE-2021-41075
+ RESERVED
+CVE-2021-41074
+ RESERVED
+CVE-2021-41073
+ RESERVED
+CVE-2021-41072 (squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows
Director ...)
+ TODO: check
+CVE-2021-41071
+ RESERVED
+CVE-2021-41070
+ RESERVED
+CVE-2021-41069
+ RESERVED
+CVE-2021-41068
+ RESERVED
+CVE-2021-41067
+ RESERVED
+CVE-2021-41066
+ RESERVED
+CVE-2021-41065
+ RESERVED
+CVE-2021-41064
+ RESERVED
+CVE-2021-41063
+ RESERVED
+CVE-2021-41062
+ RESERVED
+CVE-2021-41061
+ RESERVED
+CVE-2021-41060
+ RESERVED
+CVE-2021-41059
+ RESERVED
+CVE-2021-41058
+ RESERVED
+CVE-2021-41057
+ RESERVED
+CVE-2021-41056
+ RESERVED
+CVE-2021-41055
+ RESERVED
+CVE-2021-41053
+ RESERVED
+CVE-2021-41052
+ RESERVED
+CVE-2021-41051
+ RESERVED
+CVE-2021-41050
+ RESERVED
+CVE-2021-41049
+ RESERVED
+CVE-2021-41048
+ RESERVED
+CVE-2021-41047
+ RESERVED
+CVE-2021-41046
+ RESERVED
+CVE-2021-41045
+ RESERVED
+CVE-2021-41044
+ RESERVED
+CVE-2021-41043
+ RESERVED
+CVE-2021-41042
+ RESERVED
+CVE-2021-41041
+ RESERVED
+CVE-2021-41040
+ RESERVED
+CVE-2021-41039
+ RESERVED
+CVE-2021-41038
+ RESERVED
+CVE-2021-41037
+ RESERVED
+CVE-2021-41036
+ RESERVED
+CVE-2021-41035
+ RESERVED
+CVE-2021-41034
+ RESERVED
+CVE-2021-41033 (In all released versions of Eclipse Equinox, at least until
version 4. ...)
+ TODO: check
+CVE-2021-41032
+ RESERVED
+CVE-2021-41031
+ RESERVED
+CVE-2021-41030
+ RESERVED
+CVE-2021-41029
+ RESERVED
+CVE-2021-41028
+ RESERVED
+CVE-2021-41027
+ RESERVED
+CVE-2021-41026
+ RESERVED
+CVE-2021-41025
+ RESERVED
+CVE-2021-41024
+ RESERVED
+CVE-2021-41023
+ RESERVED
+CVE-2021-41022
+ RESERVED
+CVE-2021-41021
+ RESERVED
+CVE-2021-41020
+ RESERVED
+CVE-2021-41019
+ RESERVED
+CVE-2021-41018
+ RESERVED
+CVE-2021-41017
+ RESERVED
+CVE-2021-41016
+ RESERVED
+CVE-2021-41015
+ RESERVED
+CVE-2021-41014
+ RESERVED
+CVE-2021-41013
+ RESERVED
+CVE-2021-41012
+ RESERVED
+CVE-2021-41011
+ RESERVED
+CVE-2021-41010
+ RESERVED
+CVE-2021-41009
+ RESERVED
+CVE-2021-41008
+ RESERVED
+CVE-2021-41007
+ RESERVED
+CVE-2021-41006
+ RESERVED
+CVE-2021-41005
+ RESERVED
+CVE-2021-41004
+ RESERVED
+CVE-2021-41003
+ RESERVED
+CVE-2021-41002
+ RESERVED
+CVE-2021-41001
+ RESERVED
+CVE-2021-41000
+ RESERVED
+CVE-2021-40999
+ RESERVED
+CVE-2021-40998
+ RESERVED
+CVE-2021-40997
+ RESERVED
+CVE-2021-40996
+ RESERVED
+CVE-2021-40995
+ RESERVED
+CVE-2021-40994
+ RESERVED
+CVE-2021-40993
+ RESERVED
+CVE-2021-40992
+ RESERVED
+CVE-2021-40991
+ RESERVED
+CVE-2021-40990
+ RESERVED
+CVE-2021-40989
+ RESERVED
+CVE-2021-40988
+ RESERVED
+CVE-2021-40987
+ RESERVED
+CVE-2021-40986
+ RESERVED
+CVE-2021-3800
+ RESERVED
CVE-2021-40985
RESERVED
CVE-2021-40984
@@ -240,7 +422,7 @@ CVE-2021-40866 (Certain NETGEAR smart switches are affected
by a remote admin pa
NOT-FOR-US: Netgear
CVE-2021-3799
RESERVED
-CVE-2021-41054 [buffer overflow in atftpd]
+CVE-2021-41054 (tftpd_file.c in atftp through 0.7.4 has a buffer overflow
because buff ...)
- atftp <unfixed>
NOTE:
https://sourceforge.net/p/atftp/code/ci/d255bf90834fb45be52decf9bc0b4fb46c90f205/
CVE-2021-3798
@@ -4266,12 +4448,12 @@ CVE-2021-39127
RESERVED
CVE-2021-39126
RESERVED
-CVE-2021-39125
- RESERVED
-CVE-2021-39124
- RESERVED
-CVE-2021-39123
- RESERVED
+CVE-2021-39125 (Affected versions of Atlassian Jira Server and Data Center
allow anony ...)
+ TODO: check
+CVE-2021-39124 (The Cross-Site Request Forgery (CSRF) failure retry feature of
Atlassi ...)
+ TODO: check
+CVE-2021-39123 (Affected versions of Atlassian Jira Server and Data Center
allow unaut ...)
+ TODO: check
CVE-2021-39122 (Affected versions of Atlassian Jira Server and Data Center
allow anony ...)
NOT-FOR-US: Atlassian
CVE-2021-39121 (Affected versions of Atlassian Jira Server and Data Center
allow authe ...)
@@ -4280,8 +4462,8 @@ CVE-2021-39120
RESERVED
CVE-2021-39119 (Affected versions of Atlassian Jira Server and Data Center
allow users ...)
NOT-FOR-US: Atlassian
-CVE-2021-39118
- RESERVED
+CVE-2021-39118 (Affected versions of Atlassian Jira Server and Data Center
allow remot ...)
+ TODO: check
CVE-2021-39117 (The AssociateFieldToScreens page in Atlassian Jira Server and
Data Cen ...)
NOT-FOR-US: Atlassian
CVE-2021-39116 (Affected versions of Atlassian Jira Server and Data Center
allow remot ...)
@@ -17514,20 +17696,20 @@ CVE-2021-33366 (Memory leak in the
gf_isom_oinf_read_entry function in MP4Box in
- gpac <unfixed>
NOTE:
https://github.com/gpac/gpac/commit/0a85029d694f992f3631e2f249e4999daee15cbf
NOTE: https://github.com/gpac/gpac/issues/1785
-CVE-2021-33365
- RESERVED
+CVE-2021-33365 (Memory leak in the gf_isom_get_root_od function in MP4Box in
GPAC 1.0. ...)
+ TODO: check
CVE-2021-33364 (Memory leak in the def_parent_box_new function in MP4Box in
GPAC 1.0.1 ...)
- gpac <unfixed>
NOTE:
https://github.com/gpac/gpac/commit/fe5155cf047252d1c4cb91602048bfa682af0ea7
NOTE: https://github.com/gpac/gpac/issues/1783
-CVE-2021-33363
- RESERVED
+CVE-2021-33363 (Memory leak in the infe_box_read function in MP4Box in GPAC
1.0.1 allo ...)
+ TODO: check
CVE-2021-33362 (Stack buffer overflow in the hevc_parse_vps_extension function
in MP4B ...)
- gpac <unfixed>
NOTE:
https://github.com/gpac/gpac/commit/1273cdc706eeedf8346d4b9faa5b33435056061d
NOTE: https://github.com/gpac/gpac/issues/1780
-CVE-2021-33361
- RESERVED
+CVE-2021-33361 (Memory leak in the afra_box_read function in MP4Box in GPAC
1.0.1 allo ...)
+ TODO: check
CVE-2021-33360
RESERVED
CVE-2021-33359 (A vulnerability exists in gowitness < 2.3.6 that allows an
unauthen ...)
@@ -20461,10 +20643,10 @@ CVE-2021-32141
RESERVED
CVE-2021-32140
RESERVED
-CVE-2021-32139
- RESERVED
-CVE-2021-32138
- RESERVED
+CVE-2021-32139 (The gf_isom_vp_config_get function in GPAC 1.0.1 allows
attackers to c ...)
+ TODO: check
+CVE-2021-32138 (The DumpTrackInfo function in GPAC 1.0.1 allows attackers to
cause a d ...)
+ TODO: check
CVE-2021-32137 (Heap buffer overflow in the URL_GetProtocolType function in
MP4Box in ...)
- gpac <unfixed>
NOTE:
https://github.com/gpac/gpac/commit/328def7d3b93847d64ecb6e9e0399684e57c3eca
@@ -78875,12 +79057,12 @@ CVE-2020-20674
RESERVED
CVE-2020-20673
RESERVED
-CVE-2020-20672
- RESERVED
-CVE-2020-20671
- RESERVED
-CVE-2020-20670
- RESERVED
+CVE-2020-20672 (An arbitrary file upload vulnerability in
/admin/upload/uploadfile of ...)
+ TODO: check
+CVE-2020-20671 (A cross-site request forgery (CSRF) in KiteCMS V1.1 allows
attackers t ...)
+ TODO: check
+CVE-2020-20670 (An arbitrary file upload vulnerability in /admin/media/upload
of ZKEAC ...)
+ TODO: check
CVE-2020-20669
RESERVED
CVE-2020-20668
@@ -121804,8 +121986,8 @@ CVE-2019-20103
RESERVED
CVE-2019-20102 (The attachment-uploading feature in Atlassian Confluence
Server from v ...)
NOT-FOR-US: Atlassian
-CVE-2019-20101
- RESERVED
+CVE-2019-20101 (Affected versions of Atlassian Jira Server and Data Center
allow anony ...)
+ TODO: check
CVE-2019-20100 (The Atlassian Application Links plugin is vulnerable to
cross-site req ...)
NOT-FOR-US: Atlassian Application Links plugin
CVE-2019-20099 (The VerifyPopServerConnection!add.jspa component in Atlassian
Jira Ser ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6d664e211d79966f7fb335d009481935c632cf5f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6d664e211d79966f7fb335d009481935c632cf5f
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
