Neil Williams pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7a49f9ff by Neil Williams at 2022-01-24T15:11:29+00:00
Add new CVEs for iotjs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2789,21 +2789,38 @@ CVE-2022-22897
CVE-2022-22896
RESERVED
CVE-2022-22895 (Jerryscript 3.0.0 was discovered to contain a
heap-buffer-overflow via ...)
- TODO: check
+ - iotjs <unfixed> (bug #1004298)
+ [buster] - iotjs <not-affected> (Vulnerable code introduced later)
+ NOTE: https://github.com/jerryscript-project/jerryscript/pull/4850
+ NOTE: https://github.com/jerryscript-project/jerryscript/issues/4882
CVE-2022-22894 (Jerryscript 3.0.0 was discovered to contain a stack overflow
via ecma_ ...)
- TODO: check
+ - iotjs <unfixed> (bug #1004298)
+ NOTE: https://github.com/jerryscript-project/jerryscript/issues/4890
+ NOTE: https://github.com/jerryscript-project/jerryscript/pull/4899
CVE-2022-22893 (Jerryscript 3.0.0 was discovered to contain a stack overflow
via vm_lo ...)
- TODO: check
+ - iotjs <unfixed> (bug #1004298)
+ NOTE: https://github.com/jerryscript-project/jerryscript/issues/4901
+ NOTE: https://github.com/jerryscript-project/jerryscript/pull/4945
CVE-2022-22892 (There is an Assertion 'ecma_is_value_undefined (value) ||
ecma_is_valu ...)
- TODO: check
+ - iotjs <unfixed> (bug #1004298)
+ [buster] - iotjs <not-affected> (Vulnerable code introduced later)
+ NOTE: https://github.com/jerryscript-project/jerryscript/issues/4872
+ NOTE: https://github.com/jerryscript-project/jerryscript/pull/4878
CVE-2022-22891 (Jerryscript 3.0.0 was discovered to contain a SEGV
vulnerability via e ...)
- TODO: check
+ - iotjs <unfixed> (bug #1004298)
+ [buster] - iotjs <not-affected> (Vulnerable code introduced later)
+ NOTE: https://github.com/jerryscript-project/jerryscript/issues/4871
+ NOTE: https://github.com/jerryscript-project/jerryscript/pull/4885
CVE-2022-22890 (There is an Assertion 'arguments_type !=
SCANNER_ARGUMENTS_PRESENT &am ...)
- TODO: check
+ - iotjs <unfixed> (bug #1004298)
+ NOTE: https://github.com/jerryscript-project/jerryscript/pull/4849
+ NOTE: https://github.com/jerryscript-project/jerryscript/issues/4847
CVE-2022-22889
RESERVED
CVE-2022-22888 (Jerryscript 3.0.0 was discovered to contain a stack overflow
via ecma_ ...)
- TODO: check
+ - iotjs <unfixed> (bug #1004298)
+ NOTE: https://github.com/jerryscript-project/jerryscript/pull/4877
+ NOTE: https://github.com/jerryscript-project/jerryscript/issues/4848
CVE-2022-22887
RESERVED
CVE-2022-22886
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7a49f9ff7701956620b1dad05de4cb3e22869717
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7a49f9ff7701956620b1dad05de4cb3e22869717
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
