Sylvain Beucler pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4b34c1b1 by Sylvain Beucler at 2021-11-24T17:56:49+01:00
CVE-2019-8921,CVE-2019-8922/bluez: track 2 missing CVEs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -177265,8 +177265,14 @@ CVE-2019-8923 (XAMPP through 5.6.8 and previous
allows SQL injection via the cds
NOT-FOR-US: XAMPP
CVE-2019-8922
RESERVED
+ - bluez 5.54-1
+ NOTE:
https://ssd-disclosure.com/ssd-advisory-linux-bluez-information-leak-and-heap-overflow/
+ NOTE:
https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=6c7243fb6ab90b7b855cead98c66394fedea135f
(5.51)
CVE-2019-8921
RESERVED
+ - bluez 5.54-1
+ NOTE:
https://ssd-disclosure.com/ssd-advisory-linux-bluez-information-leak-and-heap-overflow/
+ NOTE:
https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=7bf67b32709d828fafa26256b4c78331760c6e93
(5.51)
CVE-2019-8920 (iart.php in XAMPP 1.7.0 has XSS, a related issue to
CVE-2008-3569. ...)
NOT-FOR-US: XAMPP
CVE-2019-8919 (The seadroid (aka Seafile Android Client) application through
2.2.13 f ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4b34c1b1316c0e517ac141a699407a6565b0b4fc
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4b34c1b1316c0e517ac141a699407a6565b0b4fc
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits